On the 12th of December following the comprehensive timeline report detailing what happened during the Equifax Breach, the Subcommittee on oversight and
On the 12th of December following the comprehensive timeline report detailing what happened during the Equifax Breach, the Subcommittee on oversight and
Yesterday at noon BST a new github issue was opened in the popular eslint repository on github. Someone had highjacked this package and published a version
One of our core beliefs at Sonatype is in the need for actionable, in-depth security research being necessary for remediating issues and fixing them. Our data
Following the recent announcement of the npm package conventional-changelog having a malicious version uploaded (read more in Brian's blog ), I wanted to
The breach at Equifax is a siren call. It's time for organizations to approach the problem of managing open source software by using automated technology,
