Featured Article
New Design, New Features: Maven Central Improvements for Developers
This Week in Malware - Over 70 Packages Discovered
2 minute read time
This week, we discovered and analyzed six dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - Nearly 40 Packages Discovered
2 minute read time
This week in malware, we discovered and analyzed nearly 40 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - Over 50 Packages Discovered
2 minute read time
This week we discovered and analyzed nearly 5 dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - Over 100 Packages Discovered
6 minute read time
This week in malware, we discovered and analyzed more than 100 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - 135 Packages Target npm and PyPI Registries
3 minute read time
This week in malware, we discovered and analyzed 135 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
Despite What Some Vendors Say, Please Don’t Ignore Log4j
5 minute read time
Ignoring Log4j and recommending that high-risk open source vulnerabilities be left in application code isn't just irresponsible, it's dangerous.
Read More...
This Week in Malware - Over Five Dozen More Packages Discovered
2 minute read time
This week in malware we discovered and analyzed over five dozen packages flagged as malicious, suspicious, or dependency confusion attacks.
Read More...
This Week in Malware - Almost 100 Packages
2 minute read time
This week in malware Sonatype discovered and analyzed over seven dozen packages flagged as malicious, suspicious, or dependency confusion attacks.
Read More...
Rule Over Your Dependencies and Scan at Your Own Open Source Risk
5 minute read time
A good way to make sure that your organization's vulnerabilities don't go unnoticed is conducting regular scans of open source used in your environments.
Read More...