From Path Traversal to Supply Chain Attack: Breaking Smithery MCP Server Hosting