---
title: "Discussion on \"MCP Supply Chain Attacks: Poisoned npm and PyPI Dependencies (Security 1)\" | Hashnode"
description: "Discussion on \"MCP Supply Chain Attacks: Poisoned npm and PyPI Dependencies (Security 1)\". How a poisoned npm or PyPI package can take over an MCP server, and practical defenses: lockfiles, provenance, allowlists, and runtime egress control."
url: "https://hashnode.com/posts/mcp-supply-chain-attacks-poisoned-npm-and-pypi-dependencies-security-1/6af06f1f6bd10e54d9953b99"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [MCP Supply Chain Attacks: Poisoned npm and PyPI Dependencies (Security 1)](https://whoai.hashnode.dev/mcp-supply-chain-attacks-poisoned-npm-and-pypi-dependencies-security-1?utm_source=hashnode&utm_medium=feed)

How a poisoned npm or PyPI package can take over an MCP server, and practical defenses: lockfiles, provenance, allowlists, and runtime egress control.

4d ago · 4 min read · whoai.hashnode.dev  
Read the article

-   [#ai](https://hashnode.com/tag/ai)
-   [#mcp](https://hashnode.com/tag/mcp)
-   [#security](https://hashnode.com/tag/security)
-   [#supply-chain](https://hashnode.com/tag/supply-chain)

## Written by

[Hu Jin](https://hashnode.com/@whoai)

@whoai

  
[View profile](https://hashnode.com/@whoai)

Software engineer writing about AI coding tools, RAG, and Azure AI Search.

Software engineer writing about AI coding tools, RAG, and Azure AI Search.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.