Two strands, weekly. What is happening in MCP supply-chain security, and what the daily observations actually show. Where the record has something to add we bring it; where it does not, we say so.
An npm package caught backdooring an AI agent's email was unpublished, and with it went the only public copy of what shipped. That gap is why MCPSearch exists.
2,203 servers and 11,476 versions appeared in the MCP ecosystem this week, 123 versions stopped being listed, and one day carried six times the usual status changes.