MCP-POWERED CODING AGENTS HIT REAL TOOLING (CHROME DEVTOOLS, ABL IN WINDSURF) AS TYPOSQUATTING TARGETS IDES
MCP-based coding agents are moving into serious dev workflows while IDE extension typosquatting raises fresh supply chain risk. Google’s open-source [chrome-de...
MCP-based coding agents are moving into serious dev workflows while IDE extension typosquatting raises fresh supply chain risk.
Google’s open-source chrome-devtools-mcp lets agents like Gemini, Claude, Cursor, or Copilot drive a real Chrome instance for performance tracing, debugging, and reliable automation via Puppeteer, all through Model Context Protocol.
On the enterprise side, Progress launched an AI Coding Assistant service for OpenEdge ABL that sets up Windsurf IDE with an ABL plug‑in and MCP connector, embedding RAG grounded in your code and standards to speed modernization.
At the same time, a typosquatting campaign has targeted VS Code tools and the Windsurf IDE, per DevOps.com, underscoring the need for extension allowlists and publisher verification.
Agent-driven dev tooling is getting practical: browser perf audits, debugging, and domain-specific assistants now plug into IDE workflows.
Rising IDE adoption increases the blast radius of supply chain attacks via malicious or lookalike extensions.
-
terminal
Stand up chrome-devtools-mcp locally and have your agent collect a performance trace; compare metrics to your existing CI browser tests.
-
terminal
Audit IDE extensions and enforce an allowlist with verified publishers; attempt installing a lookalike to confirm policy blocks it.
Legacy codebase integration strategies...
- 01.
Gate MCP servers behind SSO and network policies; log and alert on agent actions touching production-like data.
- 02.
For OpenEdge teams, pilot the ABL connector in a non-prod repo to validate refactoring quality against house standards.
Fresh architecture paradigms...
- 01.
Design new internal dev tools around MCP-capable agents for repeatable browser automation and perf analysis as code.
- 02.
Adopt a default-deny policy for IDE extensions and pin versions to reduce supply chain drift.