Poisoned Pipeline / Incidents / AS157
MCP configuration poisoning (text-file machine takeover)
Checkmarx Zero: MCP configuration poisoning — owning a developer
machine with just a text file (malicious MCP server/config). Same
class as T0210 / Hades (AS30), documented as a first-party research
incident pattern.
Mapped techniques
- T0210 Poison AI coding-agent config or workspace
supply-chain mcp config
Malicious MCP config/text file as the implant.