Sonatype Logo dark

Platform
- Products
- Why Sonatype
- Accelerate Pipelines with the World's Leading Artifact Repository Manager
  
  Try It Free
- Explore solutions for you
Solutions
- OSS Management
- Developer Solutions
- Industry
- Sonatype Named a Leader in Forrester Wave™ for SCA Software
  
  Read Report
Pricing
Resources
- Resources
- Customer Resources
- Developer Community
- Research Vulnerabilities and Find the Safest Components for AI-Driven Development
  
  Get Started Free
Company
- Company
  - About
  - Customer Stories
  - Events
  - Newsroom
  - Careers
  - Blog
  - Contact Us
- Partners
- Contact Us
  
  Speak to a Software Supply Chain Expert
  
  Contact Us
Login Contact Us Book a Demo

Login Contact Us Book a Demo

This is a search field with an auto-suggest feature attached.

There are no suggestions because the search field is empty.

Posts by Sonatype Security Research Team

Filters

Search

Topics

AI

Application Security

DevOps

Malware & Vulnerabilities

Regulations & Compliance

SBOM

Software Development

featured image for Q1 2026 Open Source Malware Index: Adaptive Attacks, Familiar Weaknesses

Blog Post

Q1 2026 Open Source Malware Index: Adaptive Attacks, Familiar Weaknesses

Read More

featured image for Axios Compromise on npm Introduces Hidden Malicious Package

Blog Post

Axios Compromise on npm Introduces Hidden Malicious Package

Read More

featured image for Compromised litellm PyPI Package Delivers Multi-Stage Credential Stealer

Blog Post

Compromised litellm PyPI Package Delivers Multi-Stage Credential Stealer

Read More

featured image for Sonatype Discovers Two Malicious npm Packages

Blog Post

Sonatype Discovers Two Malicious npm Packages

Read More

featured image for Hijacked npm Packages Deliver Malware via Solana, Linked to Glassworm

Blog Post

Hijacked npm Packages Deliver Malware via Solana, Linked to Glassworm

Read More

featured image for pac4j CVE-2026-29000: New Critical Java Vulnerability

Blog Post

pac4j CVE-2026-29000: New Critical Java Vulnerability

Read More

featured image for SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms

Blog Post

SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms

Read More

featured image for Open Source Malware Index Q4 2025: Automation Overwhelms Ecosystems

Blog Post

Open Source Malware Index Q4 2025: Automation Overwhelms Ecosystems

Read More

featured image for Years-Old Apache Struts2 Vulnerability Downloaded 387K+ Times in the Past Week

Blog Post

Years-Old Apache Struts2 Vulnerability Downloaded 387K+ Times in the Past Week

Read More

featured image for Three New React Vulnerabilities Surface on the Heels of React2Shell

Blog Post

Three New React Vulnerabilities Surface on the Heels of React2Shell

Read More

featured image for Exploring Unnecessary Risk: The Persistence of Open Source Vulnerabilities

Blog Post

Exploring Unnecessary Risk: The Persistence of Open Source Vulnerabilities

Read More

featured image for The Second Coming of Shai-Hulud: Attackers Innovating on npm

Blog Post

The Second Coming of Shai-Hulud: Attackers Innovating on npm

Read More

1
2

Platform

Nexus One Pricing Nexus Repository Repository Firewall Lifecycle Guide SBOM Manager Maven Central

Why Sonatype

Compare Sonatype Open Source Intelligence Best SCA Tools Best Malware Protection Tools Best Artifact Repository Solutions Best SBOM Compliance Solutions

Resources

Resources Center Blog Product Tours Webinars Customer Stories Analyst Reports Research

Developer

Integrations All Day DevOps (ADDO) Free Nexus Repo Download Sonatype OSS Index OSS Component Search MCP Server Security Advisories

Customer Resources

My Sonatype Documentation Support

Company

About Careers Partners Newsroom Trust Center

Contact Us

X social logo
LinkedIn social logo
Facebook social logo
YouTube social logo
GitHub social logo

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences
Trust Center

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.