It's pretty daring to do something like this. Something so brazen has a 100% chance of getting caught given enough time...
That said, installing any package is a liability, whether it's a library or an mcp server.
That said, installing any package is a liability, whether it's a library or an mcp server.