Same Name, Different Server: A Security Census of Silent Drift in the Model Context Protocol Ecosystem
The Model Context Protocol (MCP) has become the common interface through which large language model applications reach external tools, and its public registry now distributes thousands of community-built servers with little of the vetting infrastructure that mature package ecosystems have accumulated. This paper report...