Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Read More

SHARE:

Sonatype_Blog_Logo_White
GettyImages-984835220
READ MORE

The 2018 State of the Software Supply Chain Report is here!

By Derek Weeks on September 25, 2018 devsecops

2 minute read time

Today, Sonatype introduces the 2018 State of the Software Supply Chain Report, on managing open source components to accelerate innovation.
Read More...
READ MORE

The Curious Case of a German Smartphone: Why Software Supply Hygiene Matters

2 minute read time

We live our lives with license agreements that make software vendors immune to liability -- but are things about to change?
Read More...