Threat Database
509 malicious packages detected across AI marketplaces
| Risk | Package | First Seen |
|---|---|---|
| low | think-mcp-server | 3d ago |
| critical | mysql-mcp-server | 3d ago |
| critical | @gleanwork/configure-mcp-server | 3d ago |
| critical | @inkeep/agents-mcp | 3d ago |
| low | @mulesoft/mcp-server | 3d ago |
| critical | @rootcx/mcp-server | 3d ago |
| critical | @variflight-ai/variflight-mcp | 3d ago |
| critical | @fangjunjie/ssh-mcp-server | 3d ago |
| critical | reactbits-dev-mcp-server | 3d ago |
| critical | @kelceyp/caw-server | 3d ago |
| critical | @superinbox/mcp-server | 3d ago |
| critical | ios-simulator-mcp | 3d ago |
| critical | discogs-mcp-server | 3d ago |
| critical | @vizejs/musea-mcp-server | 3d ago |
| critical | joplin-mcp-server | 3d ago |
| critical | @coinbase/cds-mcp-server | 3d ago |
| critical | ai.mcpcap/mcpcap | 3d ago |
| critical | ai.mcpanalytics/analytics | 3d ago |
| low | ai.ludo/game-assets | 3d ago |
| low | ai.kubit/mcp-server | 3d ago |