Sandworm Mode Ai Toolchain Mcp Injection

nomit vyas@xoxo

•updated Feb 23, 2026•3•0•75

Detects suspicious modification of AI assistant configuration files potentially related to MCP server injection.