Top all-time · #10434
Palo Alto Networks
Company blog · koi.security/blogsecurity
Palo Alto Networks is the company blog at koi.security, writing about security. Since 2025, 7 different Hacker News readers have linked it 7 times, most often “A Postmark backdoor that’s downloading emails”. It is still writing: the last post was on 2026-10-26, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this security blog for a post about the malicious postmark-mcp npm package, which added a secret BCC to emails from version 16. The comment quotes the post as a source for an incident warning.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Secure the modern software stack with Koi. Gain visibility, context, and real-time protection over extensions, MCPs, and autonomous AI agent endpoints.
Most-linked posts?
- A Postmark backdoor that’s downloading emails3 people · 3 mentions · first linked 2025-09-26
What Hacker News says?
> PSA: Declare an incident if someone on your team installed the postmark-mcp on their machine. > All your emails had a secret BCC added to them since version 16. https://www.koi.security/blog/postmark-mcp-npm-malicious-bac...
Comment linking /blog/postmark-mcp-npm-malicious-backdoor-email-theft
on “PSA: Declare an incident if someone on your team installed the postmark-MCP”Submitted A Postmark backdoor that’s downloading emails as a story · 308 points
HN discussionSubmitted Live updates: Shai-hulud, the most dangerous NPM breach in history as a story · 46 points
HN discussionSubmitted SpyVPN: The Google-Featured VPN That Captures Your Screen (FreeVPN.One) as a story · 4 points
HN discussionSubmitted First Malicious MCP in the Wild: The Postmark Backdoor Stealing Your Emails as a story · 3 points
HN discussionSubmitted When Both Marketplaces Fall: The Cross-Platform Extension Malware Campaign as a story · 1 points
HN discussionSubmitted The most dangerous NPM breach in History as a story · 1 points
HN discussion
