Malicious mcp.json Created via PR Checkout Triggering Unexpected Shell Spawn

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•2

Detects the creation or modification of an mcp.json file within IDE configuration directories (.vscode, .amazonq), followed shortly by the execution of shell or interpreter processes (bash, sh, cmd, powershell, npx) by the IDE process. This behavior suggests the installation of a malicious Model Context Protocol (MCP) server configuration that could facilitate command execution or persistence within the developer environment.