Coding agents remember the old MCP servers, miss that they were archived, and install them anyway
Ourtake
Nobody attacked anyone. The agent just trusted its training data a little too much.
What happened
Glow Labs reported that AI coding agents across several harnesses and model providers repeatedly installed deprecated Anthropic MCP reference servers, chosen from training data rather than the current official servers. The servers carry four high-severity vulnerabilities, including remote code execution in the Puppeteer server, and have about 17 million npm downloads since July 2025. Maintainers declined to issue fixes, and Glow Labs has seen no exploitation.