ContextCrush Flaw Exposes AI Development Tools to Attacks

**ContextCrush** is a critical vulnerability in the Context7 MCP Server that allowed attackers to embed malicious instructions in library documentation’s "Custom Rules," which AI coding assistants would execute as trusted guidance, enabling data exfiltration and destructive commands; Upstash patched the issue after disclosure and there is no evidence of in-the-wild exploitation.