From Path Traversal to Supply Chain Attack: Breaking Smithery MCP Server Hosting | Hacker News Reader