We have no details so far, and the source is an MCP service dev.
This could be anything on the scale of vibesecurity issues to serious problems in the GitHub account recovery process, because (like most recovery processes) it is circumventable if you're dedicated.
Comments
We have no details so far, and the source is an MCP service dev.
This could be anything on the scale of vibesecurity issues to serious problems in the GitHub account recovery process, because (like most recovery processes) it is circumventable if you're dedicated.
Or they just fell for social engineering.
https://github.com/MCPBlender/blender-mcp/commit/4460e97c04e...
That doesn’t look pretty
There's a lot in these commits. What did you see in there?
Mirror: https://xcancel.com/sidahuj/status/2086445625147793503