News and Notes from the Makers of Nexus | Sonatype Blog

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

8 minute read time

Sonatype CTO and co-founder, Brian Fox, shares his thoughts on the developing role of cyber liability insurance in software supply chain management.

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

Is cyber liability insurance a moral hazard in the US?

Secure your software supply chain

Subscribe for all the latest software security news and events