MCP's Unvetted Infrastructure: Supply Chain Risk in the AI Era

This article connects three critical events—a malware attack on litellm, a security firm's warning about Shadow IT, and the sudden emergence of five Chinese tech companies offering MCP servers—to expose a brewing supply chain crisis. Unlike traditional npm vulnerabilities that run code locally, MCP servers actively transmit sensitive data (location queries, search terms, source code) to external services, creating exponentially higher risk. With no security audits or vendor oversight, organizations are building AI agents on untrusted infrastructure while geopolitical concerns around data sovereignty add another layer of complexity.