The Sonatype Newsroom

Featured News and Stories

October 14, 2026

Sonatype Unveils Nexus Repository Pro+ to Stop Malicious Components Before Developers or AI Agents Pull Them Into Builds

Open source packages, AI models and MCP servers are screened as soon as developers or AI agents request them, so only trusted components reach the ...

Miasma campaign poisons 20-plus npm packages, hunts for developer secrets

June 29, 2026

2026: The Year of AI-Assisted Attacks

May 4, 2026

Press Releases

See All Press Releases

Sonatype Threat Research

Powering unmatched visibility and insights

Sonatype’s world-class Security Research team leads the market in identifying and analyzing threats within the open source ecosystem. With a combination of automated intelligence, expert analysis, and secondary expansion, the team uncovers new forms of open source malware, software supply chain attacks, and emerging vulnerabilities. From in-depth reports to real-time threat detection, Sonatype Security Research powers the insights that keep our customers ahead of adversaries and sets the standard for trust in software development.

Learn more

In the News

See All Media

2026 State of the Software Supply Chain Report

Sonatype was the first to share year-over-year analyses of open source consumption and threat data. For over a decade, the State of the Software Supply Chain® Report has provided developers and security teams with insights into trends, risks, and threats related to open source software — ultimately helping them better understand and manage their software supply chains.

Learn more

2008

year founded in Fulton, Maryland

employees from 50 countries and 15 languages

organizations supported, including 70% of Fortune 100

15 MILLION

developers rely on Sonatype

FULTON, MD

headquarters

MAVEN

Central stewards

Logos

Access our collection of approved corporate logos and brand guidelines for use.

Download

Leadership

Find high-resolution photos of our fearless innovators on the executive team.

Download

Product

Find individual logos for products within the Sonatype Platform.

Download

Explore Sonatype's latest announcements, media coverage, threat research, brand assets, and more.

Featured News and Stories

Sonatype Unveils Nexus Repository Pro+ to Stop Malicious Components Before Developers or AI Agents Pull Them Into Builds