Milestone: Since Sonatype began tracking malicious open source packages in 2017, we have logged nearly 2 million malicious packages. Scale: Sonatype Research Labs logged 149,329 open source malware ...
The first defense for trustworthy software is deciding what enters the build. For years, a repository's job was to give developers a reliable place to find the packages and artifacts their projects ...
A malicious release of TensorLake's TypeScript SDK, tensorlake@0.5.144, used an install hook to search for developer credentials and accept remote commands. Sonatype's code review found that its ...
Secure open source consumption requires more than an approved package registry or a scan before release. Teams need to control where components come from, evaluate ...
Today’s enterprise repository is asked to manage a different software supply than it was built for a decade ago. Modern development increasingly draws from newer language ecosystems, rapidly expanding ...
Sonatype is proud to be recognized as a Leader in The Forrester Wave™: SCA Software 2024. Forrester evaluated 10 top providers and named Sonatype a Leader among them. To us, this underscores our ...
AI-assisted development is making it easier to create code, assemble applications, and introduce new software into the development workflow. For application development and platform leaders, a ...
Report security issues for a potential reward. Rewards are based on the severity of the finding and its impact on the organization. Let’s work together to help secure Sonatype’s products and services ...
With over 100,000 deployments globally, Nexus Repository received the highest rating among leaders. See why enterprises choose Sonatype Nexus Repository.
Sonatype identified 21,764 open source malware packages in Q1 2026, bringing the total logged since 2017 to 1,346,867. npm accounted for 75% of malicious packages this quarter. Trojans dominated, with ...
As evidenced by the ongoing evolution of cyber attacks, vulnerabilities and malware in open source software pose formidable challenges to the security and integrity of your software supply chain. At ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results