Threat Database
509 malicious packages detected across AI marketplaces
| Risk | Package | First Seen |
|---|---|---|
| clean | eslint-plugin-ai-safety | Jan 1, 2026 |
| high | mcp-code-interpreter | Jan 1, 2026 |
| medium | langchain-tools-extra | Jan 1, 2026 |
| high | react-ai-chatbot | Jan 1, 2026 |
| clean | mcp-calculator | Dec 29, 2025 |
| critical | mcp-filesystem-extended | Dec 27, 2025 |
| medium | ai-code-review-bot | Dec 23, 2025 |
| clean | react-markdown-renderer | Dec 13, 2025 |
| critical | mcp-database-query | Dec 11, 2025 |