Featured Article

Ransomware in PyPI: Sonatype Spots 'Requests' Typosquats

By Ax Sharma on August 02, 2022 vulnerabilities

Sonatype has spotted multiple typosquats of the popular Python library, 'requests' that contain ransomware scripts.

What Developers Need to Know About WhatsApp's Recent Security Dilemma

By Katie McCaskey on October 08, 2019 AppSec

3 minute read time

Sonatype issues an Advisory Deviation Notice for CVE-2019-11932, a vulnerability that exploits processor memory and recently affected WhatsApp.

Read More...

[Part 3] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

By Wayne Jackson on December 16, 2014 Cyber Supply Chain Management and Transparency Act

4 minute read time

[Part 3] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Read More...

[Part 2] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

By Wayne Jackson on December 08, 2014 Cyber Supply Chain Management and Transparency Act

5 minute read time

[Part 2] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Read More...

Code, Cars, and Congress: A Time for Cyber Supply Chain Management (1 of 3)

By Wayne Jackson on December 05, 2014 Cyber Supply Chain Management and Transparency Act

5 minute read time

Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Read More...

Open Source Observations from RSA

By Karen Gardner on March 18, 2014 HP Fortify

2 minute read time

Open Source Observations from RSA

Read More...

Sonatype & HP Partnership Offering a New Breed of Application Security

By Ryan Berg on February 24, 2014 Component Lifecycle Management

1 minute read time

Today Sonatype and HP announced Sonatype’s Component Lifecycle Management (CLM) analysis technology has been integrated into HP’s cloud-based software security solution – HP Fortify on Demand.

Read More...

Software composition analysis

Container Security

CODE QUALITY ANALYSIS

Repository MANAGEMENT

Complete Platform

Book a Demo

For Professionals

For Industries

Content

CUSTOMER Portal

Integrations & Free Tools

About us

Contact Us

Sonatype Blog

Ransomware in PyPI: Sonatype Spots 'Requests' Typosquats

What Developers Need to Know About WhatsApp's Recent Security Dilemma

[Part 3] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

[Part 2] Code, Cars, and Congress: A Time for Cyber Supply Chain Management

Code, Cars, and Congress: A Time for Cyber Supply Chain Management (1 of 3)

Open Source Observations from RSA

Sonatype & HP Partnership Offering a New Breed of Application Security

Products

Free Tools

Solutions

Resources

Customer Portal

Company