A malicious MCP server is silently stealing user emails

Koi Security says it’s discovered the first malicious MCP server in the wild, exposing a risk to the entire ecosystem