Reported observations below are attributed to the linked sources. Review questions and controls are editorial interpretation.
What the source reports
The study reports 157 behaviorally confirmed malicious skills from 98,380 collected registry skills. Its current record states that all reported packages were removed after disclosure.
Primary records: S12 ↗
The trust boundary
Registry admission and the authority attached to installed third-party skills.
What this does not establish
The 157 packages are not 157 independent campaigns or 157 confirmed victim incidents. The collection and verification process bounds what was found.
We reviewed the linked publication text or cataloged evidence level. We did not execute the suspect package, independently reproduce the investigation, or verify current registry availability.
Questions for a review
These are practical questions prompted by the case, not controls independently validated by this website.
- Unit of analysis
- Does a count refer to files, packages, revisions, publishers, campaigns, or people?
- Label evidence
- What observation supports the malicious label, and how are uncertain cases handled?
- Snapshot limits
- Which registry and collection period does the result cover?
Editorial lesson
Retain the label evidence and denominator. Do not turn a dataset count into a claim about current ecosystem prevalence.
For your own environment, turn the question into a bounded test with an exact package identity, synthetic input, expected permitted behavior, prohibited effect, and observable stopping point. Keep a blocked attempt distinct from a completed effect. Preserve the legitimate task result alongside the security observation.