[HIGH] @akoskm/create-mcp-server-stdio Command Injection (CVE-2025-54994)

Arbitrary command execution via the package's port-monitoring utility due to unsanitised stdin handling in the MCP STDIO interface. Affected versions unverified — under review; the vulnerability is part of a broader STDIO design-flaw class affecting the MCP ecosystem.