Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Read More

SHARE:

Sonatype_Blog_Logo_White
READ MORE

Cheeseburger Risk: Not for the Faint of Heart

3 minute read time

If you had a heart attack, would you stop eating cheeseburgers? For most people, the answer is “No”.
Read More...
READ MORE

4 Open Source Components You Need to Update Right Now

8 minute read time

Heartbleed has put the security community on notice: it is time to take a harder look at the security status of open source components and frameworks.
Read More...