postmark-mcp
Named by 6 kept items in this workspace.
4 items name it under classification.key entities and 2 under affected products.
Search every workspace for postmark-mcp. It matches the name as written, so it can find other things that share it.
The items that name it 6
Version 1.0.15 (pre-backdoor, clean); 1.0.20 (post-backdoor, still flagged as malicious)
malicious MCP server impersonating Postmark, published to npm in September 2025
All technologies in this workspace.