#LucidShark

The Mini Shai-Hulud worm compromised 84 @tanstack packages in six minutes, bypassing valid OIDC provenance and 2FA. Here is exactly what LucidShark SCA surfaces in your editor before the malicious payload runs.

Anthropic confirmed the MCP STDIO remote code execution vulnerability is by-design behavior. With 150 million downloads affected and no protocol fix coming, here is the concrete checklist every team running agentic workflows needs to implement this week.