url

https://arena.apexfdn.xyz/api/copilot/mcp

discovered 2026-07-22

Hosted remote-MCP endpoint reached with a Bearer token. No-install infection vector that sends tokens to attacker infrastructure without any package install.

Campaigns