Home › MCP Server › Security: Threats, Risks, and Controls › Top 10 MCP Server Vulnerabilities › 3. Tool Squatting & Rug Pulling Jun 30, 2025 · Updated Jul 02, 2025 1 min read 3. Tool Squatting & Rug Pulling 3. Tool Squatting & Rug Pulling A seemingly harmless tool (e.g., net_scan) is published and later updated to include malicious logic once adoption begins. Impact: Users unknowingly continue using compromised tools. Mitigation: Lock tool versions after approval Verify signatures at runtime Share: