Skip Navigation

Platform
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Book a Demo

All Malware & Vulnerabilities blog posts

Filter by

Category

Content Type

Search

Reset

Blog Post

Multiple crypto packages hijacked, turned into info-stealers

Read More

Blog Post

Apache Tomcat: Vulnerable versions downloaded nearly 100K times since PoC

Read More

Blog Post

Bypassing picklescan: Sonatype discovers four vulnerabilities

Read More

Blog Post

The hidden threat: Tackling malware in your software supply chain

Read More

Blog Post

2025 predictions: Threats

Read More

Blog Post

Fake VS Code extension on npm uses altered ScreenConnect utility as spyware

Read More

Blog Post

Fake Solana packages target crypto devs, abuse Slack and ImgBB for data theft

Read More

Blog Post

CVE-2024-53677: A critical file upload vulnerability in Apache Struts2

Read More

Blog Post

npm packages from rspack, vant compromised, blocked by Sonatype

Read More

Blog Post

Counterfeit ESLint and Node 'types' libraries downloaded thousands of times abuse Pastebin

Read More

Blog Post

Lottie Player compromised in supply chain attack - all you need to know

Read More

Blog Post

Counterfeit Lodash attack leverages AnyDesk to target Windows users

Read More

Blog Post

'Netfetcher' package drops illicit 'node' binary on Windows

Read More

Blog Post

Crypto enthusiasts flood npm with more than 281,000 bogus packages overnight

Read More

Blog Post

Ideal typosquat 'solana-py' steals your crypto wallet keys

Read More

1
2
3

Platform
- Overview
- Repository
- Pricing
- Firewall
- SBOM Manager
- Lifecycle
- Integrations
- AI/ML
- Other Products
  - Container
  - Advanced Legal Pack

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.

Subscribe Today

First Name

Email

Company

Form Tier

Lead Source Most Recent