Skip Navigation

Platform
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Book a Demo

All Malware & Vulnerabilities blog posts

Filter by

Category

Content Type

Search

Reset

Blog Post

Polyfill.io supply chain attack hits 100,000+ websites — all you need to know

Read More

Blog Post

Exploit creator selling 250+ reserved npm packages on Telegram

Read More

Blog Post

'cors-parser' npm package hides cross-platform backdoor in PNG files

Read More

Blog Post

Protecting your development environment: Lessons from Log4j and beyond

Read More

Blog Post

Russia-linked 'Lumma' crypto stealer now targets Python devs

Read More

Blog Post

PyPI crypto-stealer targets Windows users, revives malware campaign

Read More

Blog Post

Zero-day vulnerabilities: A beginner’s guide

Read More

Blog Post

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

Read More

Blog Post

CVE-2024-3094 The targeted backdoor supply chain attack against XZ and liblzma

Read More

Blog Post

npm flooded with 748 packages that store movies

Read More

Blog Post

What are the OWASP Top 10 vulnerabilities?

Read More

Blog Post

'everything' matters - why the npm package sparked controversy

Read More

Blog Post

Unraveling the Struts2 security vulnerability: A deep dive

Read More

Blog Post

Struts2 CVE-2023-50164 by the numbers

Read More

Blog Post

CVE-2023-50164: Another vulnerability in the widely used Apache Struts2 component

Read More

1
2
3

Platform
- Overview
- Repository
- Pricing
- Firewall
- SBOM Manager
- Lifecycle
- Integrations
- AI/ML
- Other Products
  - Container
  - Advanced Legal Pack

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Subscribe Today

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.