AgentsPraetorian MCPHammer — First Open-Source MCP Security Testing FrameworkPraetorian·high signalXBlueskyLinkedInCopy linkPraetorian releases MCPHammer: MCP server chaining demos, content injection, data exfil PoCs. Critical finding: uvx creates zero-click typosquatting vector for MCP servers.SourceSource pagePraetorian↳ Follow the threadStack layer / Threat patternClaude Code 2.1.269 Ships a Plugin Eval Runner and a Knob to Raise the Workflow Tool's Concurrent Agent Cap to 256Anthropic (claude-code CHANGELOG)Policy dependency / Threat patternpydantic-ai 2.43.0 stops keying Temporal tool opt-out checks on an MCP importGitHubStack layer / Threat patternOmniRoute ACP custom-agent registration is remote code execution, unauthenticated whenever requireLogin is offGitHub Security AdvisoriesStack layer / Threat patternArize Phoenix ships Claude Code, Codex and Cursor plugins plus an MCP skills root in two releases a day apartGitHubStack layer / Threat patternMastra 1.66.0 adds observability signal deletion and transform hooks around observational memoryGitHub ReleasesStack layer / Threat patternqwen-code 0.23.3 can hand a subagent turn to Claude Code over ACPGitHubStack layer / Threat patternpascalorg/editor is a 3D architectural CAD editor built for agents, with a local CLI and MCP toolsGitHub TrendingStack layer / Threat patternKilo Code 7.6.0 imports your Claude Code instructions and skills, and its agent now pushes PR fixes itselfGitHub