The Sonatype Newsroom

Featured News and Stories

December 9, 2025

Sonatype Introduces Guide, the Intelligent Solution for Secure Agentic Development

New solution connects generative and agentic AI coding assistants to real-time open source intelligence to optimize development speed, reduce ...

A concerning number of Log4j downloads are still vulnerable four years on

December 12, 2025

Sonatype Guide aims to steer secure open source agentic development

December 12, 2025

Press Releases

See All Press Releases

Sonatype Threat Research

Powering unmatched visibility and insights

Sonatype’s world-class Security Research team leads the market in identifying and analyzing threats within the open source ecosystem. With a combination of automated intelligence, expert analysis, and secondary expansion, the team uncovers new forms of open source malware, software supply chain attacks, and emerging vulnerabilities. From in-depth reports to real-time threat detection, Sonatype Security Research powers the insights that keep our customers ahead of adversaries and sets the standard for trust in software development.

Learn more

In the News

See All Media

10th Annual State of the Software Supply Chain Report

Sonatype was the first to share year-over-year analyses of open source consumption and threat data. For over a decade, the State of the Software Supply Chain® Report has provided developers and security teams with insights into trends, risks, and threats related to open source software — ultimately helping them better understand and manage their software supply chains.

Learn more

2008

year founded in Fulton, Maryland

employees from 50 countries and 15 languages

organizations supported, including 70% of Fortune 100

15 million

developers rely on Sonatype

Fulton, MD

headquarters

Maven Central

stewards

Logos

Access our collection of approved corporate logos and brand guidelines for use.

Download

Leadership

Find high-resolution photos of our fearless innovators on the executive team.

Download

Product

Find individual logos for products within the Sonatype Platform.

Download

Explore Sonatype's latest announcements, media coverage, threat research, brand assets, and more.

Featured News and Stories

Sonatype Introduces Guide, the Intelligent Solution for Secure Agentic Development

A concerning number of Log4j downloads are still vulnerable four years on

Sonatype Guide aims to steer secure open source agentic development

Sonatype Threat Research

Powering unmatched visibility and insights

10th Annual State of the Software Supply Chain Report

Press Kit

Logos

Leadership

Product

The Sonatype Newsroom

Explore Sonatype's latest announcements, media coverage, threat research, brand assets, and more.

Featured News and Stories

Sonatype Introduces Guide, the Intelligent Solution for Secure Agentic Development

A concerning number of Log4j downloads are still vulnerable four years on

Sonatype Guide aims to steer secure open source agentic development

Press Releases

Sonatype Introduces Guide, the Intelligent Solution for Secure Agentic Development

Sonatype Intelligence Reveals CVE Program Leaves Majority of Vulnerabilities Unscored

Sonatype Unveils Nexus One: An AI-Native DevSecOps Platform to Secure and Accelerate Software Innovation

Sonatype Celebrates Grand Opening of India Innovation Hub in Hyderabad

Sonatype Announces 2025 Elevate Award Winners & Finalists

Open Source Malware Surges 140% in Q3 as Attackers Target Data and Trusted Dependencies

Sonatype Threat Research

Powering unmatched visibility and insights

npm Chalk and Debug Packages Hit in Software Supply Chain Attack

2024 in Open Source Malware Report

In the News

Shai-Hulud malware is back with a vengeance and hit more than 19,000 GitHub repositories so far — here's what developers need to know

640 NPM Packages Infected in New ‘Shai-Hulud’ Supply Chain Attack

Did your npm pipeline break today? Check your ‘classic’ tokens

A concerning number of Log4j downloads are still vulnerable four years on

Sonatype Guide aims to steer secure open source agentic development

Are Trade Concerns Trumping US Cybersecurity?

10th Annual State of the Software Supply Chain Report

Press Kit

Logos

Leadership

Product