invariantlabs.ai on Hacker News
2 stories on the front page, newest first. Scroll down to watch the site change over time.
GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)
477 points by andy99 | 287 comments
Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.