MCP and Agent Skills Become New Attack Surface: Permission Governance, Static Scanning and ChainDrop Injection into Claude Configuration
In August 2026, the ChainDrop worm achieved persistence by injecting into `.claude/settings.json` and `.vscode/tasks.json`, with malicious execution triggered once developers opened the repository. Meanwhile, approximately 36% of MCP servers and Agent Skills have security flaws, and 80% of enterprises lack governance for Agentic AI. This article sorts out the three-layer attack surface of models/instructions/Harness, MCP Tool Poisoning and protocol approval gaps, introduces JFrog Agent Guard and skill-audit-mcp static scanning, and provides an actionable protection checklist for CI integration and runtime approval.
Read MoreChainDrop: Over 400 npm Packages Compromised by Self-propagating Worm, with CI/CD Credentials Used as Attack Springboard
On August 4, 2026, Microsoft Threat Intelligence disclosed the large-scale ChainDrop npm supply chain attack: more than 440 packages and over 2,200 malicious versions were released within hours, affecting high-frequency dependencies with weekly downloads exceeding 500 million times such as keyv and flat-cache. This worm is a variant of Mini Shai-Hulud. It automatically executes during npm install via the preinstall hook, steals credentials of npm/GitHub/AWS/K8s/Vault, automatically modifies tarballs for self-propagation, and can abuse GitHub Actions OIDC and inject Claude/VS Code configurations to establish persistence. This article sorts out the attack chain, IOCs, self-check methods and protection suggestions.
Read More