> Run an MCP server in Google Cloud
> Deploy to Google Kubernetes Engine (GKE)
It can take only one developer on your team to install a malicious NPM package to summon Shai-Hulud once again and then steal your credentials and breach your MCP server.
After that what else could possibly go wrong?
