Webinar | ON DEMAND
Stop Malicious Packages Before They Hit Your Build
Watch NowMalicious packages no longer stand out—they blend in. Based on Sonatype’s analysis of 4,300+ malicious open source packages, this session reveals how attackers are moving beyond typosquatting to publish ecosystem-adjacent packages that look like legitimate plugins, SDKs, and developer tools. Learn the naming patterns and tactics behind these attacks, how to spot suspicious dependencies before they enter your build, and practical ways to keep malicious code out of developer environments and CI/CD pipelines.
Featured Speakers
Andrés Pérez
Product Marketing Manager
.png?width=242&height=208&name=Andr%C3%A9s%20P%C3%A9rez%20-%20Product%20Marketing%20Manager%2c%20Sonatype%20(1).png)
Garrett Calpouzos
Principal Security Researcher
Related Resources
View Podcast
Watch On Demand