Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk ...