Skip to main content

Cybersecurity statistics / Malicious Packages

Only 40% of organizations have adopted malicious package detection.

PublisherJFrog
Report2026 Software Supply Chain Security State of the Union
Published20 May 2026
TopicsMalicious Packages, Threat Detection

Published by JFrog in 2026 Software Supply Chain Security State of the Union, 20 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

11.01% of organizations have active malicious packages embedded in production environments.
Orca Security, 27/05/2026
33.8% of surveyed OT and ICS cybersecurity professionals report using AI for threat detection and alerting.
Nozomi Networks, 25/07/2026
Detections of long, malicious prompt-injection payloads increased roughly fivefold between March and May 2026.
Check Point, 18/07/2026
Detected threats increased by 77% as fraudsters use AI to scale and personalize harmful messaging.
Infobip, 12/07/2026
50% of UK organizations lack strong confidence in detecting threats across messaging and social platforms
KnowBe4, 20/06/2026
Top AI use cases for cybersecurity are automating scanning and testing (50%), predictive risk analysis (48%), and threat detection (38%).
ISSA & Omdia, 20/06/2026

Get the newsletter

Weekly cybersecurity statistics by email.