Stay Current on the Latest Sonatype News

Media Hit

Open-source malware doubles, data exfiltration attacks dominate

Help Net Security

April 3, 2025

Media Hit

Crypto Mining Malware and Open Source Malware Packages Doubled in Q1 2025

Cryptonews

April 1, 2025

Media Hit

Sonatype reveals 18,000 malicious open source packages in its Q1 Open Source Malware Index

SD Times

April 2, 2025

Media Hit

9-Year-Old NPM Crypto Package Hijacked for Information Theft

Security Week

March 28, 2025

Media Hit

Multiple npm Packages Laced with Infostealers

SC Media

March 28, 2025

Media Hit

How to Eliminate Software Development Bottlenecks

Information Week

March 28, 2025

Media Hit

Sonatype supports secure development in Rust

SecurityInfoWatch

March 27, 2025

Media Hit

7 types of tech debt that could cripple your business

CIO

March 25, 2025

Media Hit

Tools and Talks Worth Checking Out at KubeCon Europe

The New Stack

March 17, 2025

Media Hit

The risks of AI-generated code are real — here’s how enterprises can manage the risk

VentureBeat

March 14, 2025

Media Hit

AI security defenses potentially circumvented via picklescan flaws

SC Media

March 13, 2025

Media Hit

Picklescan Vulnerabilities Could Let Hackers Bypass AI Security Checks

HackRead

March 12, 2025

Media Hit

OpenSSF Publishes Security Baseline for Open-Source Projects

InfoQ

March 5, 2025

Media Hit

Sonatype AI SCA delivers visibility and control over AI/ML usage

Help Net Security

March 5, 2025

Media Hit

Sonatype adds new tools to secure open-source AI and ML models in software supply chains

SiliconAngle

March 4, 2025

Media Hit

From Legacy Systems to 5G: Enterprise Security Threats in 2025

Infosecurity Magazine

February 28, 2025

Media Hit

The Silent AI Boom: Why Shadow AI Is Growing - and How to Rein It In

DevOps Digest

February 26, 2025

Media Hit

NIS2: the GDPR of cybersecurity

TechRadar Pro

February 12, 2025

In the News

Stay up to date on what’s new at Sonatype.

Open-source malware doubles, data exfiltration attacks dominate

Crypto Mining Malware and Open Source Malware Packages Doubled in Q1 2025

Sonatype reveals 18,000 malicious open source packages in its Q1 Open Source Malware Index

9-Year-Old NPM Crypto Package Hijacked for Information Theft

Multiple npm Packages Laced with Infostealers

How to Eliminate Software Development Bottlenecks

Sonatype supports secure development in Rust

7 types of tech debt that could cripple your business

Tools and Talks Worth Checking Out at KubeCon Europe

The risks of AI-generated code are real — here’s how enterprises can manage the risk

AI security defenses potentially circumvented via picklescan flaws

Picklescan Vulnerabilities Could Let Hackers Bypass AI Security Checks

OpenSSF Publishes Security Baseline for Open-Source Projects

Sonatype AI SCA delivers visibility and control over AI/ML usage

Sonatype adds new tools to secure open-source AI and ML models in software supply chains

From Legacy Systems to 5G: Enterprise Security Threats in 2025

The Silent AI Boom: Why Shadow AI Is Growing - and How to Rein It In

NIS2: the GDPR of cybersecurity