Unofficial Postmark MCP npm silently stole users' emails

https://www.bleepingcomputer.com/news/security/unofficial-postmark-mcp-npm-silently-stole-users-emails/