A counterfeit npm package masquerading as Postmark's MCP server has been found to have stolen thousands of emails daily. The…