Threat Database
476 malicious packages detected across AI marketplaces
| Risk | Package | First Seen |
|---|---|---|
| critical | @modelcontextprotocol/server-everything | 4d ago |
| low | @supabase/mcp-server-postgrest | 4d ago |
| critical | @gongrzhe/server-gmail-autoauth-mcp | 4d ago |
| critical | playwright-mcp-server | 4d ago |
| critical | malicious-mcp-server | 4d ago |
| critical | @cloudflare/mcp-server-cloudflare | 4d ago |
| low | @regle/mcp-server | 4d ago |
| critical | next-devtools-mcp | 4d ago |
| critical | slite-mcp-server | 4d ago |
| critical | @benborla29/mcp-server-mysql | 4d ago |
| critical | @tsmztech/mcp-server-salesforce | 4d ago |
| critical | @cap-js/mcp-server | 4d ago |
| critical | @azure/mcp | 4d ago |
| critical | codex-mcp-server | 4d ago |
| critical | @browserstack/mcp-server | 4d ago |
| critical | @azure-devops/mcp | 4d ago |
| critical | @modelcontextprotocol/server-sequential-thinking | 4d ago |
| critical | @brave/brave-search-mcp-server | 4d ago |
| critical | @amap/amap-maps-mcp-server | 4d ago |
| critical | @esaio/esa-mcp-server | 4d ago |