[{"data":1,"prerenderedAt":233},["ShallowReactive",2],{"copy:id:site:":3,"copy:id:security:list,ui,incidents.2025-04-mcp-tool-poisoning.title,incidents.2025-04-mcp-tool-poisoning.summary,incidents.2025-04-mcp-tool-poisoning.tags,incidents.2025-05-github-mcp-toxic-agent-flow.title,incidents.2025-05-github-mcp-toxic-agent-flow.summary,incidents.2025-05-github-mcp-toxic-agent-flow.tags,incidents.2025-06-echoleak-m365-copilot.title,incidents.2025-06-echoleak-m365-copilot.summary,incidents.2025-06-echoleak-m365-copilot.tags,incidents.2025-06-mcp-inspector-rce.title,incidents.2025-06-mcp-inspector-rce.summary,incidents.2025-06-mcp-inspector-rce.tags,incidents.2025-07-filesystem-mcp-escaperoute.title,incidents.2025-07-filesystem-mcp-escaperoute.summary,incidents.2025-07-filesystem-mcp-escaperoute.tags,incidents.2025-07-supabase-mcp-token-leak.title,incidents.2025-07-supabase-mcp-token-leak.summary,incidents.2025-07-supabase-mcp-token-leak.tags,incidents.2025-07-mcp-remote-os-command-injection.title,incidents.2025-07-mcp-remote-os-command-injection.summary,incidents.2025-07-mcp-remote-os-command-injection.tags,incidents.2025-07-amazon-q-wiper-prompt.title,incidents.2025-07-amazon-q-wiper-prompt.summary,incidents.2025-07-amazon-q-wiper-prompt.tags,incidents.2025-09-postmark-mcp-backdoor.title,incidents.2025-09-postmark-mcp-backdoor.summary,incidents.2025-09-postmark-mcp-backdoor.tags,incidents.2026-01-openclaw-control-ui-rce.title,incidents.2026-01-openclaw-control-ui-rce.summary,incidents.2026-01-openclaw-control-ui-rce.tags,incidents.2026-01-moltbook-database-exposure.title,incidents.2026-01-moltbook-database-exposure.summary,incidents.2026-01-moltbook-database-exposure.tags,incidents.2026-openclaw-gateways-exposed.title,incidents.2026-openclaw-gateways-exposed.summary,incidents.2026-openclaw-gateways-exposed.tags,incidents.2026-02-clawhavoc-malicious-skills.title,incidents.2026-02-clawhavoc-malicious-skills.summary,incidents.2026-02-clawhavoc-malicious-skills.tags,incidents.2026-02-mcp-typescript-sdk-response-leak.title,incidents.2026-02-mcp-typescript-sdk-response-leak.summary,incidents.2026-02-mcp-typescript-sdk-response-leak.tags,incidents.2026-04-comment-and-control-ci-secrets.title,incidents.2026-04-comment-and-control-ci-secrets.summary,incidents.2026-04-comment-and-control-ci-secrets.tags,incidents.2026-06-mcp-python-sdk-session-hijack.title,incidents.2026-06-mcp-python-sdk-session-hijack.summary,incidents.2026-06-mcp-python-sdk-session-hijack.tags,incidents.2026-06-claude-code-webfetch-exfiltration.title,incidents.2026-06-claude-code-webfetch-exfiltration.summary,incidents.2026-06-claude-code-webfetch-exfiltration.tags":125,"copy:id:site:common":231},{"common":4,"nav":16,"footer":44,"home":51,"error":118},{"skip":5,"menu":6,"language":7,"sections":8,"footer":9,"tool":10,"home":11,"breadcrumbs":12,"copy":13,"copied":14,"download":15},"Lewati ke konten","Menu","Bahasa","Bagian","Footer","alat","Beranda","Breadcrumb","Salin","Disalin","Unduh",{"groups":17,"items":25},{"build":18,"connect":19,"instruct":20,"run":21,"web":22,"secure":23,"track":24},"Bangun","Hubungkan","Beri instruksi","Jalankan","Buka situs Anda","Amankan","Lacak",{"models":26,"cost":27,"frameworks":28,"mcp":29,"mcpConfig":30,"mcpClients":31,"agentsMd":32,"files":33,"openclaw":34,"agentReady":35,"llmsTxt":36,"robotsTxt":37,"apiCatalog":38,"bots":39,"security":40,"incidents":41,"checklist":42,"changelog":43},"Model dan harga API","Kalkulator biaya agent","Framework dan SDK","Server MCP","Generator konfigurasi MCP","Klien MCP","Generator AGENTS.md","File instruksi","Self-host OpenClaw","Situs web siap untuk agent","Generator llms.txt","robots.txt untuk bot AI","Generator katalog API","Direktori bot AI","Keamanan agen","Log insiden","Daftar periksa keamanan","Log perubahan",{"about":45,"privacy":46,"terms":47,"sitemap":48,"disclaimer":49,"checked":50},"Tentang","Privasi","Ketentuan","Peta situs","Referensi independen bagi mereka yang membangun agen AI. Tidak berafiliasi dengan vendor mana pun yang disebutkan di sini.","Fakta diperiksa {date}",{"seo":52,"eyebrow":55,"title":56,"lead":57,"ctaMcp":58,"ctaCost":59,"ctaAgents":60,"sheetLabel":61,"sheetTitle":62,"sheet":63,"sheetNote":69,"sectionsTitle":70,"sections":71,"latestTitle":101,"allChanges":102,"rulesTitle":103,"rules":104,"aboutLink":117},{"title":53,"description":54},"DotsAgent: referensi dan alat untuk membangun agen AI","Harga API LLM, kalkulator biaya agen, konfigurasi MCP untuk 13 klien, generator AGENTS.md dan llms.txt, serta catatan keamanan agen. Gratis, tersedia dalam 18 bahasa.","Untuk developer yang membangun agen AI","Referensi praktis untuk pembuat agen","Harga, protokol, file konfigurasi, dan catatan keamanan untuk pekerjaan agen, semuanya diverifikasi berdasarkan dokumentasi vendor. Cari fakta, buat file yang Anda perlukan, lalu kembali ke kode Anda.","Buat konfigurasi MCP","Hitung biaya tugas agen","Tulis AGENTS.md","Angka terkini","Kondisi stack",{"mcp":64,"openclaw":65,"cheapest":66,"models":67,"servers":29,"bots":68},"Spesifikasi MCP","OpenClaw","Model termurah, $\u002FM masuk\u002Fkeluar","Model dengan harga","Bot AI yang dipantau","Setiap angka diperiksa secara manual berdasarkan dokumentasi vendor.","Isi situs",{"models":72,"mcp":76,"instructions":79,"frameworks":82,"openclaw":85,"agentReady":89,"security":93,"changelog":97},{"title":73,"body":74,"unit":75},"Model dan harga","Harga token input, output, dan cache per sejuta token, ditampilkan berdampingan, dengan kalkulator untuk menghitung seluruh proses agent.","model",{"title":29,"body":77,"unit":78},"Katalog server Model Context Protocol dan generator konfigurasi yang membuat file yang tepat untuk setiap klien.","server",{"title":33,"body":80,"unit":81},"Tulis AGENTS.md dan lihat cara setiap tool membaca CLAUDE.md, .cursor\u002Frules, dan file serupa.","format file",{"title":28,"body":83,"unit":84},"Bandingkan framework agent dan SDK vendor berdasarkan bahasa, lisensi, dukungan MCP, dan fitur multi-agent.","framework",{"title":86,"body":87,"unit":88},"Host OpenClaw sendiri","Instal, konfigurasi, dan perbarui OpenClaw di komputer atau server Anda sendiri, langkah demi langkah.","rilis terbaru",{"title":90,"body":91,"unit":92},"Situs yang siap untuk agent","Buat llms.txt, aturan robots.txt untuk crawler AI, dan api-catalog, serta cari bot apa pun berdasarkan user agent.","bot terdaftar",{"title":94,"body":95,"unit":96},"Keamanan agent","Risiko OWASP untuk agent, catatan insiden nyata, dan checklist yang dapat Anda centang sebelum peluncuran.","insiden tercatat",{"title":98,"body":99,"unit":100},"Changelog API","Perubahan bertanggal pada API model, SDK, dan protokol, masing-masing ditautkan ke pengumuman vendor.","entri","Perubahan terbaru","Semua perubahan","Cara kami menjaga keakuratan",[105,108,111,114],{"title":106,"body":107},"Fakta bersumber.","Setiap harga, versi, dan flag tertaut ke halaman vendor sebagai sumbernya, sehingga Anda bisa memeriksanya sendiri.",{"title":109,"body":110},"Pemeriksaan bertanggal.","Setiap halaman menampilkan kapan faktanya terakhir diperiksa. Entri yang sudah usang akan diperiksa ulang atau dihapus.",{"title":112,"body":113},"Tanpa penempatan berbayar.","Tidak ada yang membayar agar tercantum, mendapat peringkat lebih tinggi, atau dideskripsikan dengan lebih baik.",{"title":115,"body":116},"Tool berjalan di browser Anda.","Generator dan kalkulator bekerja secara lokal, dan apa yang Anda ketik tidak dikirim ke server.","Tentang DotsAgent",{"title":119,"body":120,"home":121,"popular":122,"failed":123,"failedBody":124},"Halaman tidak ditemukan","Alamat ini tidak cocok dengan halaman mana pun. Halamannya mungkin sudah dipindahkan, atau tautannya mungkin salah ketik.","Buka halaman beranda","Tool populer","Terjadi kesalahan","Halaman gagal dimuat di sisi kami. Coba lagi sebentar lagi, atau mulai dari halaman beranda.",{"list":126,"ui":133,"incidents":135},{"seo":127,"crumb":41,"eyebrow":130,"title":131,"lead":132},{"title":128,"description":129},"Log insiden keamanan agen: 17 insiden sejak 2025","Insiden keamanan agen AI yang dipublikasikan sejak April 2025, dari peracunan tool MCP hingga eksfiltrasi melalui WebFetch di Claude Code, lengkap dengan CVE, akar masalah, dan perbaikannya.","{n} insiden sejak 2025","Log insiden keamanan agen","Insiden publik yang melibatkan agen AI, server MCP, dan platform agen, diurutkan dari yang terbaru. Setiap entri menjelaskan apa yang terjadi, mengapa serangan berhasil, dan apa yang perlu diubah pada penyiapan Anda.",{"crumb":94,"sources":134},"Sumber",{"2025-04-mcp-tool-poisoning":136,"2025-05-github-mcp-toxic-agent-flow":143,"2025-06-echoleak-m365-copilot":148,"2025-06-mcp-inspector-rce":154,"2025-07-filesystem-mcp-escaperoute":160,"2025-07-supabase-mcp-token-leak":166,"2025-07-mcp-remote-os-command-injection":171,"2025-07-amazon-q-wiper-prompt":176,"2025-09-postmark-mcp-backdoor":183,"2026-01-openclaw-control-ui-rce":188,"2026-01-moltbook-database-exposure":193,"2026-openclaw-gateways-exposed":199,"2026-02-clawhavoc-malicious-skills":205,"2026-02-mcp-typescript-sdk-response-leak":210,"2026-04-comment-and-control-ci-secrets":216,"2026-06-mcp-python-sdk-session-hijack":221,"2026-06-claude-code-webfetch-exfiltration":225},{"title":137,"summary":138,"tags":139},"Peracunan tool MCP: instruksi tersembunyi dalam deskripsi tool","Invariant Labs menunjukkan bahwa server MCP dapat menyembunyikan instruksi dalam deskripsi tool yang dibaca model, serta menjelaskan variasi tool shadowing dan rug pull.",[140,141,142],"MCP","prompt injection","rantai pasok",{"title":144,"summary":145,"tags":146},"Alur agen beracun GitHub MCP membocorkan repo privat melalui issue publik","Invariant Labs menunjukkan bahwa issue GitHub publik yang berbahaya dapat mengarahkan agen di server GitHub MCP untuk menyalin data dari repo privat ke pull request publik.",[140,141,147],"eksfiltrasi data",{"title":149,"summary":150,"tags":151},"EchoLeak: pencurian data dari Microsoft 365 Copilot tanpa klik","Satu email yang dirancang khusus membuat Microsoft 365 Copilot membocorkan data tanpa perlu diklik oleh pengguna. Aim Security melaporkannya sebagai EchoLeak; Microsoft memperbaikinya di sisi server.",[152,147,153],"injeksi prompt","Copilot",{"title":155,"summary":156,"tags":157},"Proxy MCP Inspector memungkinkan eksekusi kode jarak jauh dari browser","MCP Inspector sebelum 0.14.1 menjalankan proxy lokal tanpa autentikasi yang dapat diakses halaman web, sehingga memungkinkan eksekusi kode di mesin developer. CVSS 9.4.",[140,158,159],"RCE","alat developer",{"title":161,"summary":162,"tags":163},"EscapeRoute: sandbox escape pada Filesystem MCP server","Cymulate menemukan sandbox escape dan bypass symlink pada Filesystem MCP server milik Anthropic, yang memungkinkan server mengakses file di luar direktori yang diizinkan.",[140,164,165],"sandbox escape","akses file",{"title":167,"summary":168,"tags":169},"Agen Supabase MCP membocorkan token lewat tiket dukungan","Prompt injection dalam tiket dukungan membuat agen Cursor yang terhubung ke Supabase MCP dengan kunci service_role membaca tabel token integrasi dan membocorkan isinya.",[140,141,170],"lethal trifecta",{"title":172,"summary":173,"tags":174},"Injeksi perintah OS pada mcp-remote melalui authorization_endpoint","mcp-remote 0.0.5 hingga 0.1.15 dapat menjalankan perintah OS yang disisipkan oleh server MCP berbahaya dalam nilai authorization_endpoint. CVSS 9.6, diperbaiki di 0.1.16.",[140,158,175],"OAuth",{"title":177,"summary":178,"tags":179},"Ekstensi Amazon Q Developer menyertakan prompt untuk menghapus data","Amazon Q Developer untuk VS Code 1.84.0 dirilis dengan prompt sisipan yang dirancang untuk menghapus data. AWS melacak penyebabnya ke token GitHub dengan cakupan izin berlebihan di CodeBuild.",[180,181,182],"rantai pasokan","CI","kredensial",{"title":184,"summary":185,"tags":186},"postmark-mcp: server MCP berbahaya menyalin semua email","postmark-mcp 1.0.16 di npm diam-diam mengirim salinan tersembunyi setiap email yang diprosesnya kepada penyerang. Koi Security menyebutnya sebagai server MCP berbahaya pertama yang diketahui.",[140,180,187],"npm",{"title":189,"summary":190,"tags":191},"Control UI OpenClaw membocorkan token gateway dan memungkinkan RCE dengan satu klik","Control UI OpenClaw memercayai parameter kueri gatewayUrl, sehingga token gateway bocor dan RCE dapat dilakukan dengan satu klik, bahkan pada instalasi yang hanya menggunakan loopback. CVSS 8.8.",[65,158,192],"pencurian token",{"title":194,"summary":195,"tags":196},"Database Moltbook mengekspos 1.5M token API agen","Moltbook, jejaring sosial untuk agen OpenClaw, membiarkan database Supabase tanpa keamanan tingkat baris sehingga sekitar 1.5M token API, 35k alamat email, dan pesan langsung terekspos.",[197,198,65],"paparan data","Supabase",{"title":200,"summary":201,"tags":202},"Gateway OpenClaw terekspos ke internet dalam skala besar","Censys menghitung 21,639 gateway OpenClaw yang dapat diakses dari internet publik pada 31 January 2026; indeks OpenA2A mencatat angka 192,492 pada 1 September.",[65,203,204],"paparan","konfigurasi",{"title":206,"summary":207,"tags":208},"ClawHavoc: ratusan skill ClawHub berbahaya menyebarkan AMOS","Koi Security menemukan 341 skill berbahaya dari 2,857 skill di ClawHub; sebagian besar menyebarkan Atomic macOS Stealer. Pada 16 February 2026, jumlahnya mencapai 824.",[65,142,209],"malware",{"title":211,"summary":212,"tags":213},"MCP TypeScript SDK membocorkan respons antar-klien","Server MCP yang menggunakan TypeScript SDK dan berbagi satu instance server atau transport untuk beberapa klien dapat mengirim respons milik satu klien ke klien lain. Masalah ini diperbaiki di versi 1.26.0.",[140,214,215],"SDK","isolasi sesi",{"title":217,"summary":218,"tags":219},"Comment and Control: teks PR mencuri secret dari agen CI","Prompt injection dalam teks pull request dan issue mencuri secret CI dari Claude Code Security Review, Gemini CLI Action, dan GitHub Copilot Agent.",[181,141,220],"secret",{"title":222,"summary":223,"tags":224},"Pembajakan sesi dan akses tugas lintas sesi di MCP Python SDK","Dua celah di MCP Python SDK memungkinkan pembajakan sesi dan akses ke tugas milik sesi lain. Keduanya diperbaiki di versi 1.27.2 SDK.",[140,214,215],{"title":226,"summary":227,"tags":228},"Persetujuan otomatis WebFetch di Claude Code memungkinkan data bocor lewat huggingface.co","Claude Code 0.2.54 hingga 2.1.163 menyetujui request WebFetch ke huggingface.co secara otomatis, sehingga konten berbahaya yang di-host di sana dapat menarik data keluar dari sesi.",[229,147,230],"Claude Code","lalu lintas keluar",{"common":232},{"skip":5,"menu":6,"language":7,"sections":8,"footer":9,"tool":10,"home":11,"breadcrumbs":12,"copy":13,"copied":14,"download":15},1790863390566]