Stay Current on the Latest Sonatype News

Media Hit

2026: The Year of AI-Assisted Attacks

May 4, 2026

Media Hit

The Human Aspect of Red Teams – Brian Fox, Tom Tovar, T. Gwyddon ‘Data’ Owen – ASW #379

April 21, 2026

Media Hit

Eclipse Foundation Unfurls Managed VSX Registry Service

April 21, 2026

Media Hit

Open source malware sees a 21 percent increase

April 17, 2026

Media Hit

“Developers are not engineers:” Why Anthropic’s Mythos and other AI tools expose gaps in vulnerability reporting

April 16, 2026

Media Hit

The challenge of continuity in open-source development

April 15, 2026

Media Hit

Malicious npm Packages Hit Dev Environments Every 6 Minutes in Q1 2026

April 14, 2026

Media Hit

Trojan malware dominates as supply chain attacks escalate

April 14, 2026

Media Hit

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

April 13, 2026

Media Hit

Vibe Coding is shaking up the open-source model

April 7, 2026

Media Hit

CRA Compliance: What Manufacturers Must Do Before December 2027

April 3, 2026

Media Hit

North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project

April 1, 2026

Media Hit

Axios NPM Package Breached in North Korean Supply Chain Attack

April 1, 2026

Media Hit

‘The build pipeline is becoming the new frontline’: Axios npm compromise highlights growing software supply chain risks, experts warn

April 1, 2026

Media Hit

AI Coding Tools May Be Increasing Hidden Software Risk

March 30, 2026

Media Hit

OpenSSF's CRob on why open source security is still a people problem - and why AI is making it worse before it makes it better

March 27, 2026

Media Hit

AI-Powered Dependency Decisions Introduce, Ignore Security Bugs

March 26, 2026

Media Hit

From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI

March 26, 2026

In the News

Stay up to date on what’s new at Sonatype.

2026: The Year of AI-Assisted Attacks

The Human Aspect of Red Teams – Brian Fox, Tom Tovar, T. Gwyddon ‘Data’ Owen – ASW #379

Eclipse Foundation Unfurls Managed VSX Registry Service

Open source malware sees a 21 percent increase

“Developers are not engineers:” Why Anthropic’s Mythos and other AI tools expose gaps in vulnerability reporting

The challenge of continuity in open-source development

Malicious npm Packages Hit Dev Environments Every 6 Minutes in Q1 2026

Trojan malware dominates as supply chain attacks escalate

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

Vibe Coding is shaking up the open-source model

CRA Compliance: What Manufacturers Must Do Before December 2027

North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project

Axios NPM Package Breached in North Korean Supply Chain Attack

‘The build pipeline is becoming the new frontline’: Axios npm compromise highlights growing software supply chain risks, experts warn

AI Coding Tools May Be Increasing Hidden Software Risk

OpenSSF's CRob on why open source security is still a people problem - and why AI is making it worse before it makes it better

AI-Powered Dependency Decisions Introduce, Ignore Security Bugs

From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI