Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Read More

SHARE:

Sonatype_Blog_Logo_White
GettyImages-966263184
READ MORE

Repository Management: An Easy Way to Minimize Risk

By Katie McCaskey on July 05, 2019 repository manager

2 minute read time

Mykel Alvis (@mykelalvis) of Array Consulting urges developers to use a caching, and preferably security-scanning, artifact repository. Here's why.
Read More...
GettyImages-115970967
READ MORE

Anonymous Access In Nexus Repository is Not A Zero-Day Vulnerability

By Brian Fox on July 02, 2019 Nexus Repository

1 minute read time

A researcher contacted us about an issue in Nexus Repository, stemming from user access settings.
Read More...
jon-moore-bBavss4ZQcA-unsplash
READ MORE

New in Repo - Repository Routing Helps Protect Against Dependency Hijacking Attacks

By Sable Yemane on June 26, 2019 Nexus Repository

3 minute read time

How to create a repository routing rule to prevent developers from pulling a private package from a public repository. Company Pied Piper as an example.
Read More...
Blog Test-1
READ MORE

Hands On With the Nexus Platform: A Software Supply Chain Demo

By Katie McCaskey on June 14, 2019 Nexus solutions

2 minute read time

Sonatype's Ilkka Turunen demonstrates how to use the Nexus Platform. Download the files to try it yourself. You'll see how useful it is for your workflow.
Read More...
GettyImages-1058176702
READ MORE

The Path Forward for the Nexus Platform

By Katie McCaskey on June 12, 2019 Nexus Lifecycle

3 minute read time

We’re seeing double and triple digit growth across usage, Nexus Repo instances, Nexus Repo scans, and daily apps under management. What comes next?
Read More...
GettyImages-972919210
READ MORE

CVE-2019-7238 in Nexus Repository Manager 3

By Mike Hansen on March 14, 2019 Nexus Repository

1 minute read time

In late December of 2018 researchers Rico from Tencent Security Yunding Lab and Voidfyoo from Chaitin Tech responsibly disclosed a critical vulnerability in.
Read More...
rye-jessen-785346-unsplash-1
READ MORE

Dynamic Storage: Four Ways That Blob Storage Got Smarter With Nexus Repository Pro 3.15

By Andrew Taylor on January 24, 2019 Nexus Repository

3 minute read time

The release of Nexus Repository 3.15 this month builds on our blob storage functionality with the launch of Dynamic Storage.
Read More...
GettyImages-869250572-1
READ MORE

How-To Deploy a Private Docker Registry on Google Cloud Platform with Nexus

By Mohamed Labouardy on January 08, 2019 Nexus OSS

4 minute read time

Mohamed Labouardy shares a step-by-step guide on how to deploy Sonatype Nexus OSS 3 on Google Cloud Platform and how to create a private Docker hosted.
Read More...
binoc
READ MORE

Search Improvements Available in Nexus Repository Manager 3.14

By Michael Martz on October 17, 2018 search

3 minute read time

Search improvements made in Nexus Repository 3.14.
Read More...