We found an attack class in MCP tool-call receipts, built a linter for itnpmjs.com·1 pts·easterndev·0