sticky : sticky

Platform
- - Platform overview Automate your software supply chain security
  - Integrations Work in the tools, languages, and packages you already use
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

Sonatype recognized as a leader in SCA software in Forrester Wave

Blog Post

10 years of software supply chains: Navigating the growth, risks, and future of open source

Blog Post

Exploit creator selling 250+ reserved npm packages on Telegram

Blog Post

'cors-parser' npm package hides cross-platform backdoor in PNG files

Filter by

ChatGPT data leak and Redis race condition vulnerability that remains unfixed

Blog Post

Manage open source risk with improved malware detection

Blog Post

Sonatype's SBOM generation capabilities outpace the competition

Blog Post

Top 8 malicious attacks recently found on PyPI

Blog Post

Meet Frank Tingle: Values champion

Blog Post

Wicked Good Development Episode 29: White House unveils National Cybersecurity Strategy

Blog Post

What is hashing? A look at unique identifiers in software

Blog Post

Malware Monthly - February 2023

Blog Post

Wicked Good Development Episode 28: Simon Brown on visualizing software architecture

Blog Post

White House National Cybersecurity Strategy: Landmark action for a critical threat

Blog Post

New on Sonatype Learn: Easy Source Control Management (SCM) Onboarding

Blog Post

Attacker floods PyPI with 1000s of malicious packages that drop Windows trojan via Dropbox

Blog Post

How stolen information stealers are fueling an underground market

Blog Post

Meet an open source developer - A.J. Brown

Blog Post

Transitioning your software supply chain management (SSCM) to the cloud

1
...
12
13
14

Platform

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Subscribe Today

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.