Deadbugz
Named by 3 kept items in this workspace.
2 items name it under threat actors and 1 under classification.key entities.
Search every workspace for Deadbugz. It matches the name as written, so it can find other things that share it.
The items that name it 3
Currently active campaign distributing a malicious MCP server through public GitHub pull requests, tracked to a single account that filed 23 pull requests across unrelated AI and developer tool projects in 74 minutes. The server offers text formatting and summarization tools, then after exactly thre
Currently active MCP supply-chain campaign identified by Pillar Security that distributes a malicious MCP server called productivity-suite through public GitHub pull requests, using runtime-gated MCP metadata poisoning triggered after three tool calls to direct AI agents to seek sensitive credential
All threat actors in this workspace.