Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Read More

SHARE:

Sonatype_Blog_Logo_White
Connections between different services
READ MORE

Azure DevOps integration now available for Sonatype Lifecycle

By Kevin Miller on September 23, 2021 secure software supply chain

3 minute read time

In addition to our existing integration with the GitHub, GitLab, and Bitbucket services, Sonatype Lifecycle now integrates into Azure DevOps.
Read More...
GettyImages-935128292
READ MORE

Developers, Rejoice: Auto-Remediation Now Available in Eclipse, IntelliJ, and Visual Studio

By Sonal Thawani on July 08, 2019 Nexus Lifecycle

1 minute read time

Auto-remediation makes it even easier to choose the best component right within an IDE. The CIP now automatically suggests the compliant version.
Read More...