Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

Right now when a tool is called you have to click Allow in that. You can allow that specific tool for the session or always. However with a mcp like playwright it calls many tools and you have to ...