> Run an MCP server in Google Cloud > Deploy to Google Kubernetes Engine (GKE) It can take only one developer on your team to install a malicious NPM package

> Run an MCP server in Google Cloud > Deploy to Google Kubernetes Engine (GKE) It can take only one developer on your team to install a malicious NPM package to summon Shai-Hulud once again and then steal your credentials and breach your MCP server. After that what else could possibly go wrong?