Skip to main content
THREAT INTELLIGENCE

Scan Registry Statistics

Measured results from 292,280 scans of 103,973 packages in the public Sigil registry.

Total Scans

292,280

Completed scans in the public registry, covering 103,973 distinct packages.

Threats Found

110,372

Scans that surfaced at least one finding above the clean threshold.

Threat Rate

37.8%

Share of all registry scans with at least one threat finding.

Verdict Distribution

Critical risk90,742 (31.0%)
High risk19,630 (6.7%)
Medium risk22,338 (7.6%)
Low risk159,570 (54.6%)
Clean0 (0.0%)

Ecosystem Coverage

npm
154,470
pypi
76,379
clawhub
38,945
github
37,088
skills
4,385

Data Source: Sigil public scan registry (production), aggregated server-side and refreshed every 15 minutes.

Sample Size: 292,280 scans / 103,973 packages at time of load.

Limitations: covers only packages submitted to or crawled into the public registry; verdicts reflect Sigil's static scanner, which has a measured false-positive rate on benign packages (see the detection benchmark in the NOMARJ/sigil README), not independent confirmation of malice.

Share This Intelligence

Key stats to share:

Packages Scanned: 292,280
Threats Found: 110,372
Threat Rate: 37.8%

Get Threat Intelligence Updates

Weekly threat intelligence reports. Security research, new threat signatures, and product updates. No spam.

Protect Your AI Agents Now

Don't let malicious packages compromise your AI systems. Start scanning with Sigil's free CLI today.

SIGIL by NOMARK

A protective mark for every line of code.