Threat
An MCP that Reads Your Reddits and Runs Python Hidden in an Image
First reported knostic.ai
Page published
Earliest dated coverage: 19 Oct 2026 · First observed: 19 Oct 2026 · Latest dated coverage: 19 Oct 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
The Reddit MCP package turns an apparently read-only tool into an execution path for remotely replaceable Python, exposing agents and their host environments to an AI supply-chain risk.
Knostic found that PyPI package iflow-mcp_cmpxchg16-reddit-mcp version 0.1.0 downloads an image, extracts Python hidden in its pixels, and attempts to execute it when an agent calls its Reddit-reading tool. The code originated in an educational proof of concept, but the package omitted the parent README explaining that purpose. The inspected payload contained no exfiltration or persistence logic, although changing the remotely hosted image could change the code executed.