Important open source projects should not use GitHub (2020) (unixdigest.com) on hacker-news open-source GitHub MCP exploited: Accessing private repositories via MCP (invariantlabs.ai) on hacker-news model-context-protocol