MCP Servers Face Supply Chain Security Risks Similar to Past npm Attacks

·1 views

MCP servers, which run with broad access to filesystems, network resources, environment variables, and process execution, lack built-in sandboxing, making them a significant security risk for AI agent deployments. Security audits have uncovered servers passing unsanitized input to eval(), inadvertently exposing API keys, attempting to inspect other processes, and trying to load potentially exploitable eBPF programs. The MCP ecosystem faces three main supply chain threats: unrestricted publishing, compromised maintainer accounts, and dependency typosquatting — risks that mirror vulnerabilities seen in the npm ecosystem around 2015. Security researchers recommend running untrusted MCP servers in isolated virtual machines, avoiding production credentials, pinning dependencies, and parsing tool arguments as structured JSON rather than using eval(). Efforts to establish a security baseline for MCP servers are underway, with more robust supply chain attestation and independent audits planned through 2027.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developers Can Build a Personal EHR Knowledge Base Using RAG and FHIR Standards

A new technical guide published on DEV Community outlines how developers can transform disorganized medical PDF files into a structured, queryable Electronic Health Record system. The approach uses a Retrieval-Augmented Generation pipeline combining Unstructured.io for PDF parsing, Milvus as a vector database for semantic search, and DuckDB for structured analytical queries. Extracted medical data is mapped to the FHIR standard, a globally recognized framework for healthcare data interoperability, enabling consistent and portable health records. The system allows users to ask natural language questions about their health history, such as tracking glucose trends over multiple years. The guide includes step-by-step code examples and a data-flow architecture showing how raw lab reports become structured, FHIR-formatted responses.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Agentic AI Goes Beyond Chat to Execute Multi-Step Tasks Autonomously

Unlike standard AI models that respond to a single prompt with a single answer, agentic AI breaks down a goal into sequential steps and executes them independently. The approach is rooted in the ReAct framework, introduced in a 2023 paper by Yao et al., which structures AI behavior as a loop of thinking, acting, observing results, and deciding the next action. This architecture allows the system to self-correct mid-task rather than carrying early errors through to the final output. Practical applications include multi-part research, structured planning, and document synthesis — tasks where conventional chatbots typically fall short. For example, instead of offering generic travel tips, an agentic system can pull live weather data, build a packing list, identify hotels within budget, and compile everything into a usable itinerary.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How AWS CodeCommit, CodeBuild, CodeDeploy and CodePipeline Form a CI/CD Pipeline

AWS offers four core developer tools that together enable a complete continuous integration and continuous delivery pipeline. CodeCommit serves as a managed Git repository, CodeBuild handles building and testing source artifacts, and CodeDeploy pushes the resulting build artifacts to a running application. CodePipeline acts as the orchestrator, connecting all stages and managing transitions without performing builds or deployments itself. Developers configure CodeBuild behavior through a buildspec.yml file, which defines install, pre-build, build, and post-build phases along with environment variables, artifact outputs, and caching. The pipeline supports flexible provider substitutions, allowing GitHub or Jenkins to replace AWS-native services at any stage.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Most AI Prompts Score Below 60: PromptEval Report Flags Key Weaknesses

A 2026 report by PromptEval analyzed over 1,000 real user-submitted prompts across 12 use cases, including healthcare, customer support, and coding, scoring each from 0 to 100 on clarity, specificity, structure, and robustness. The average score was just 52 out of 100, with only 8% of prompts reaching the 'good' threshold of 75 or above and fewer than 1% rated 'excellent'. Defining the output format was the single strongest quality predictor, with prompts that included it scoring 27 points higher on average than those that did not — yet it was also the most frequently skipped element. Robustness, meaning how well a prompt handles ambiguous or unexpected input, was the weakest dimension in 9 out of 10 prompts analyzed. Prompt length also correlated with higher scores, though researchers attributed this to longer prompts naturally containing more structural elements rather than length being beneficial on its own.

0 comments Read more at DEV Community