Skip to main content
THREAT INTELLIGENCE

Scan Registry Statistics

Measured results from 291,758 scans of 103,536 packages in the public Sigil registry.

Total Scans

291,758

Completed scans in the public registry, covering 103,536 distinct packages.

Threats Found

110,333

Scans that surfaced at least one finding above the clean threshold.

Threat Rate

37.8%

Share of all registry scans with at least one threat finding.

Verdict Distribution

Critical risk90,712 (31.1%)
High risk19,621 (6.7%)
Medium risk22,260 (7.6%)
Low risk159,165 (54.6%)
Clean0 (0.0%)

Ecosystem Coverage

npm
154,470
pypi
76,369
clawhub
38,430
github
37,088
skills
4,385

Data Source: Sigil public scan registry (production), aggregated server-side and refreshed every 15 minutes.

Sample Size: 291,758 scans / 103,536 packages at time of load.

Limitations: covers only packages submitted to or crawled into the public registry; verdicts reflect Sigil's static scanner, which has a measured false-positive rate on benign packages (see the detection benchmark in the NOMARJ/sigil README), not independent confirmation of malice.

Share This Intelligence

Key stats to share:

Packages Scanned: 291,758
Threats Found: 110,333
Threat Rate: 37.8%

Get Threat Intelligence Updates

Weekly threat intelligence reports. Security research, new threat signatures, and product updates. No spam.

Protect Your AI Agents Now

Don't let malicious packages compromise your AI systems. Start scanning with Sigil's free CLI today.

SIGIL by NOMARK

A protective mark for every line of code.