MCP marketplaces shipped LOLBAS malware. We audited 256 agents.

I downloaded an AI agent. It was wired to invoke malware. Six months ago a Mickai engineer downloaded an AI agent from a public MCP (Model Context Protocol) marketplace. It was wired to invoke a Living-Off-the-Land Binary (LOLBAS) chain that downloaded a remote payload through a signed Microsoft binary, executed without writing to disk, and left no signature for any static scan to catch. None of the marketplaces caught it. So we built the one that does. ## What LOLBAS is, and why MCP agents are