AI coding agents are installing MCP servers that will never be patched

Glow Labs found that AI coding agents frequently install deprecated, unmaintained MCP servers (MCPhantom) from archived repositories; some of these reference servers contain high-severity vulnerabilities — notably a Puppeteer remote code execution — and have been downloaded millions of times. The report explains why standard controls miss these installs (npx/no manifest/no CVEs) and recommends fixes including harness-side warnings and pre-execution hooks, model knowledge updates, and package remediation.