Platform
- - Platform overview Automate your software supply chain security
  - Integrations Work in the tools, languages, and packages you already use
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Become a Partner Join our extensive Sonatype Partner Network
  - Find a Partner Find and connect with a certified Sonatype partner
Company

Posts by Mike Hoskins

UNIX geek. DevOps practitioner. Security advocate. Lifetime learner. Connect at github.com/deadlysyn, gitlab.com/deadlysyn, or https://blog.devopsdreams.io/

Blog Post

What's happening with the CrowdStrike incident: When a software update turns into a cyber crisis

Blog Post

Exploit creator selling 250+ reserved npm packages on Telegram

Blog Post

'cors-parser' npm package hides cross-platform backdoor in PNG files

Blog Post

Russia-linked 'Lumma' crypto stealer now targets Python devs

Blog Post

Comparing npm Audit Versus AuditJS

Blog Post

Beyond npm Audit to Traverse an Increasingly Complex Dependency Tree

Platform

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.