Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Read More

SHARE:

Sonatype_Blog_Logo_White
GettyImages-1047719428-1
READ MORE

Nexus Intelligence Insights - CVE-2017-5662 - Cross-Site Scripting (XSS)

By Elisa Velarde on January 25, 2019 vulnerabilities

4 minute read time

Nexus Intelligence Insights - CVE-2017-5662 - Cross-Site Scripting (XSS)
Read More...
GettyImages-1023387542-1
READ MORE

Introducing Nexus Intelligence Insights

By Elisa Velarde on October 12, 2018 vulnerabilities

2 minute read time

Nexus Intelligence Insights
Read More...
GettyImages-970317224-1
READ MORE

New JavaScript intelligence now available in the Nexus Platform

By Michelle Dufty on August 29, 2018 Nexus Lifecycle

2 minute read time

Nexus Intelligence now includes expanded coverage for JavaScript to identify hidden JS files not found in other solutions and a new user experience to identify.
Read More...
GettyImages-1075234744-1
READ MORE

Software Composition Analysis: Precision Definitely Matters (Just Ask Our Competitors)

3 minute read time

Just two years ago, SCA was more about helping traditional security professionals identify suspects across a broad spectrum of open source ecosystems.
Read More...