An MCP server that promises to read Reddit threads also downloads an image, extracts Python code hidden in its pixels, and attempts to run it when an AI agent calls the tool.
Discovered with Knostic’s AgentMesh. Thanks to Tamir Isaschar for the research.
Check out the research:
https://www.knostic.ai/blog/mcp-that-reads-your-reddits-and-runs-hidden-python-in-an-image
KnosticAn MCP that Reads Your Reddits and Runs Python Hidden in an Image - KnosticA PyPI MCP server for reading Reddit downloads a PNG, extracts Python hidden in its pixels and runs it on every tool call. How the chain works.