Sonatype Logo dark

Platform
- Products
- Why Sonatype
- Accelerate Pipelines with the World's Leading Artifact Repository Manager
  
  Try It Free
- Explore solutions for you
Solutions
- OSS Management
- Developer Solutions
- Industry
- Sonatype Named a Leader in Forrester Wave™ for SCA Software
  
  Read Report
Pricing
Resources
- Resources
- Customer Resources
- Developer Community
- Explore The Latest Research on AI Component Analysis
  
  Watch On-Demand
Company
- Company
  - About
  - Customer Stories
  - Events
  - Newsroom
  - Careers
  - Blog
  - Contact Us
- Partners
- Contact Us
  
  Speak to a Software Supply Chain Expert
  
  Contact Us
Login Contact Us Book a Demo

Login Contact Us Book a Demo

This is a search field with an auto-suggest feature attached.

There are no suggestions because the search field is empty.

nexus intelligence insights Posts

Filters

Search

Topics

AI

Application Security

DevOps

Malware & Vulnerabilities

Regulations & Compliance

SBOM

Software Development

featured image for New Log4j 1.x CVEs, and Critical Chainsaw Vulnerability - What to Do?

Blog Post

New Log4j 1.x CVEs, and Critical Chainsaw Vulnerability - What to Do?

Read More

featured image for Log4j Exploits Are Now Being Used to Spread Dridex Banking Trojan

Blog Post

Log4j Exploits Are Now Being Used to Spread Dridex Banking Trojan

Read More

featured image for Log4Shell by the Numbers: Why Did CVE-2021-44228 Set the Internet on Fire?

Blog Post

Log4Shell by the Numbers: Why Did CVE-2021-44228 Set the Internet on Fire?

Read More

featured image for What is the Log4j exploit?

Blog Post

What is the Log4j exploit?

Read More

featured image for Tracking the 'Noblox.js' npm malware campaign

Blog Post

Tracking the 'Noblox.js' npm malware campaign

Read More

featured image for npm Hijackers at It Again: Popular 'coa' and 'rc' Open Source Libraries Taken Over to Spread Malware

Blog Post

npm Hijackers at It Again: Popular 'coa' and 'rc' Open Source Libraries Taken Over to Spread Malware

Read More

featured image for Fake npm Roblox API package installs ransomware and has a spooky surprise

Blog Post

Fake npm Roblox API package installs ransomware and has a spooky surprise

Read More

featured image for Popular npm Project Used by Millions Hijacked in Supply-Chain Attack

Blog Post

Popular npm Project Used by Millions Hijacked in Supply-Chain Attack

Read More

featured image for Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, MacOS Devices

Blog Post

Newly Found npm Malware Mines Cryptocurrency on Windows, Linux, MacOS Devices

Read More

featured image for From feature to vulnerability: A Spring-Security-oauth2-Client story

Blog Post

From feature to vulnerability: A Spring-Security-oauth2-Client story

Read More

featured image for Damaging Linux and Mac Malware Bundled within Browserify npm Brandjack Attempt

Blog Post

Damaging Linux and Mac Malware Bundled within Browserify npm Brandjack Attempt

Read More

featured image for Deep diving into CVE-2021-22114 spring-integration-zip path traversal

Blog Post

Deep diving into CVE-2021-22114 spring-integration-zip path traversal

Read More

1
2
3
4
5

Platform

Nexus One Pricing Nexus Repository Repository Firewall Lifecycle SBOM Manager Maven Central

Why Sonatype

Compare Sonatype Open Source Intelligence Best SCA Tools Best Malware Protection Tools Best Artifact Repository Solutions Best SBOM Compliance Solutions

Resources

Resources Center Blog Product Tours Webinars Customer Stories Analyst Reports Research

Developer

Integrations All Day DevOps (ADDO) Free Nexus Repo Download Sonatype OSS Index MCP Server

Customer Resources

My Sonatype Documentation Support Training & Workshops

Company

About Careers Partners Newsroom

Contact Us

X social logo
LinkedIn social logo
Facebook social logo
YouTube social logo
GitHub social logo

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences
Trust Center

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.