Attack surface analysis of 5,121 MCP servers: 555 have toxic data flows where safe tools combine into dangerous paths

A timeline of MCP security breaches: Tool poisoning, RCE via mcp-remote, sandbox escapes, and 7,000+ exposed servers