Malicious MCP Config Injected via Pull Request Triggering Code Execution

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•4

This rule detects the creation of Amazon Q Model Context Protocol (MCP) configuration files, identified by 'mcp.json' in specific directories. It additionally correlates this file creation event with concurrent Git operations (checkout, merge, pull, or fetch) performed by a user, flagging the activity as a higher risk signal if both conditions are met.