Threat Database
476 malicious packages detected across AI marketplaces
| Risk | Package | First Seen |
|---|---|---|
| low | com.figma.mcp/mcp | 2d ago |
| critical | com.driflyte/driflyte-mcp-server | 2d ago |
| critical | com.defaultverifier/settlement-witness | 2d ago |
| critical | com.codescene/codescene-mcp-server | 2d ago |
| critical | com.blockscout/mcp-server | 2d ago |
| low | com.bizgigz/talent-ecosystem | 2d ago |
| low | com.bizgigz/agent-marketplace | 2d ago |
| critical | com.bitsbound/contract-automation | 2d ago |
| critical | com.bitsbound/contract-analysis | 2d ago |
| low | com.axiomatic-ai/prover | 2d ago |
| low | com.atlassian/atlassian-mcp-server | 2d ago |
| critical | com.appsai/mcp-server | 2d ago |
| critical | com.aiqbee/brain | 2d ago |
| critical | com.agentpmt/agentpmt | 2d ago |
| critical | com.adspirer/ads | 2d ago |
| critical | co.thisdot.docusign-navigator/mcp | 2d ago |
| critical | co.dockai/mcp | 2d ago |
| critical | ch.pfx/mcp-server | 2d ago |
| low | ch.martinelli/jooq-mcp | 2d ago |
| critical | capital.hove/read-only-local-postgres-mcp-server | 2d ago |