Cyber Companies Invariant Labs Previously Demonstrated Similar MCP Attack Against GitHub June 30, 2026 ♡Follow0 In May 2025, Invariant Labs showed a similar prompt injection attack against GitHub's MCP server, using public issues to hijack agents and leak private data. Discovered from: Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents GitHub MCPInvariant LabsPrompt Injection