vulndify-mcp-server flagged credential stealer (PyPI) — Cremit · NHI Credential Stealer Index