AI supply chain attacks don't even require malware…just post poisoned documentation

2026-03-27

Andrew Ng's Context Hub is a service that feeds API docs to coding agents via an MCP server. Researcher Mickey Shmueli found that the pipeline has zero content sanitization, anyone can submit a pull request with malicious instructions, and 58 of 97 closed PRs were merged. His PoC planted fake PyPI package names in Plaid and Stripe docs.