Paraphern/rugsnare

218 silent contract changes found in the npm MCP top. Pin MCP tool contracts, fail CI on drift. Zero deps, no telemetry, on-chain verified.

7 best points · 0 comments · 2 Hacker News posts · 6 GitHub stars · View on GitHub

Hacker News discussions

• We diffed all 66 release pairs of the official MCP servers, 140 silent changes (7 points, 0 comments, by paraphern, 2026-10-03)
• Show HN: AI agent follows instructions you never approved (1 points, 0 comments, by paraphern, 2026-10-17)