Skip to main content

CYBERSTATS

Security Intelligence

Back to Home

In 2025, 92% of npm account takeovers occur.

Endor Labs
May 27, 2026
Open SourceSupply ChainAccount Takeover

In 2025, 92% of npm account takeovers occur. — This cybersecurity statistic was published by Endor Labs in May 2026. It covers topics including Open Source, Supply Chain, Account Takeover. The original data appears in Malware in Open Source Ecosystems. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 4/1/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

In 2025, 92% of npm account takeovers occur. This data was published by Endor Labs and covers Open Source, Supply Chain, Account Takeover.

Where does this data come from?

This statistic comes from Malware in Open Source Ecosystems, published by Endor Labs on May 27, 2026. You can view the original report at https://www.endorlabs.com/research-report/2026-open-source-malware-research.

What cybersecurity topics does this cover?

This statistic relates to Open Source, Supply Chain, Account Takeover. Browse more statistics on Open Source or from Endor Labs.

Want More Statistics Like This?

Get the latest cybersecurity stats delivered to your inbox every week

Related Statistics

89% of UK IT decision makers agree that public policy and regulation should mandate open source principles such as transparency and auditability to help organisations achieve AI sovereignty.

Red Hat•5/27/2026
AI PolicyOpen Source

IT decision makers say the most valuable open source benefits for building trust in AI over the next three years are transparency and easier auditability (87%), more customisation for business and regulatory needs (82%), and greater control over how AI is built and where it runs (80%).

Red Hat•5/27/2026
Open SourceTrustAuditability

80% of IT decision makers see open source as providing greater control over how AI is built and where it runs.

Red Hat•5/27/2026
Open SourceAI Sovereignty

81% of organizations name OSS malware a top security priority.

Endor Labs•5/27/2026
Open SourceSecurity PrioritiesOrganizational Risk

Fewer than half of organizations plan to increase budgets for 2026.

Endor Labs•5/27/2026
BudgetingSecurity InvestmentOpen Source

88% of IT professionals across DevOps, Security, and Software Engineering roles say the first few days after a package release are the riskiest.

Endor Labs•5/27/2026
Risk WindowPackage ReleasesOpen Source

Browse by Topic

Open SourceSupply ChainAccount TakeoverMore from Endor Labs

Stay Ahead of Cyber Threats

Join 1,000+ security professionals getting weekly insights