Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Read More

SHARE:

Sonatype_Blog_Logo_White
GettyImages-1007464396
READ MORE

Sonatype and HackerOne Eliminate the Pain of Reporting Open Source Software Vulnerabilities

By Bruce Mayhew on March 21, 2019 Everything Open Source

3 minute read time

Sonatype has teamed up with HackerOne to build The Central Security Project, a pioneering program that brings together the ethical hacker and open source.
Read More...