Skip to main content
THREAT INTELLIGENCE

Scan Registry Statistics

Measured results from 293,654 scans of 104,893 packages in the public Sigil registry.

Total Scans

293,654

Completed scans in the public registry, covering 104,893 distinct packages.

Threats Found

110,515

Scans that surfaced at least one finding above the clean threshold.

Threat Rate

37.6%

Share of all registry scans with at least one threat finding.

Verdict Distribution

Critical risk90,827 (30.9%)
High risk19,688 (6.7%)
Medium risk22,618 (7.7%)
Low risk160,521 (54.7%)
Clean0 (0.0%)

Ecosystem Coverage

npm
154,470
pypi
76,433
clawhub
40,287
github
37,088
skills
4,385

Data Source: Sigil public scan registry (production), aggregated server-side and refreshed every 15 minutes.

Sample Size: 293,654 scans / 104,893 packages at time of load.

Limitations: covers only packages submitted to or crawled into the public registry; verdicts reflect Sigil's static scanner, which has a measured false-positive rate on benign packages (see the detection benchmark in the NOMARJ/sigil README), not independent confirmation of malice.

Share This Intelligence

Key stats to share:

• Packages Scanned: 293,654
• Threats Found: 110,515
• Threat Rate: 37.6%

Get Threat Intelligence Updates

Weekly threat intelligence reports. Security research, new threat signatures, and product updates. No spam.

Protect Your AI Agents Now

Don't let malicious packages compromise your AI systems. Start scanning with Sigil's free CLI today.

SIGIL by NOMARK

A protective mark for every line of code.