[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:sonatype":3},{"vendor":4,"products":15,"links":27,"research":38,"news":86,"iocs":89,"iocs_total":87,"activity":90},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"sonatype","Sonatype","sonatype.com","https:\u002F\u002Fwww.sonatype.com\u002F","US","Software supply chain company and steward of Maven Central.","\u002Fvendor-logos\u002Fsonatype.png","#2d36ec","Sonatype provides intelligence & automated governance to help you build faster & safer with open source and AI. From the creators of Nexus Repository.","2026-10-16T13:44:14.696902+00:00",[16],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.","Sonatype Firewall blocks malicious code and packages before they enter your software supply chain. Protect your repositories and builds.",[23],{"slug":24,"name":25,"problem":26},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[28,32,35],{"kind":29,"label":30,"url":31},"review","PeerSpot: Sonatype Lifecycle user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fsonatype-lifecycle-reviews",{"kind":29,"label":33,"url":34},"Gartner Peer Insights: Sonatype Repository Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsonatype-repository-firewall",{"kind":29,"label":36,"url":37},"PeerSpot: Sonatype Repository Firewall user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fsonatype-repository-firewall-reviews",{"total":39,"stories":40},11,[41,46,51,56,61,66,71,76,81],{"slug":42,"title":43,"published_at":44,"brief":45},"hackers-hijack-10-npm-packages-to-spread-polinrider-malware-using-ethereum-block-51d343","Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain","2026-11-09T12:39:03+00:00","Attackers compromise 10 npm packages with PolinRider malware using Ethereum blockchain for C2.",{"slug":47,"title":48,"published_at":49,"brief":50},"91-vulnerabilities-patched-in-spring-application-framework-6dfa71","91 Vulnerabilities Patched in Spring Application Framework","2026-08-24T11:58:28+00:00","Spring application framework releases updates patching 91 vulnerabilities, including one critical.",{"slug":52,"title":53,"published_at":54,"brief":55},"nearly-800-malicious-npm-packages-deliver-cross-platform-rat-and-infostealer-7f2f00","Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer","2026-08-07T18:48:17+00:00","Nearly 800 malicious npm packages deliver cross-platform RAT and infostealer.",{"slug":57,"title":58,"published_at":59,"brief":60},"atomic-arch-supply-chain-attack-hits-1-500-aur-packages-b91ed3","Atomic Arch Supply Chain Attack Hits 1,500 AUR Packages","2026-06-16T10:51:49+00:00","Arch Linux suspends AUR account registrations due to a supply chain attack impacting over 1,500 packages.",{"slug":62,"title":63,"published_at":64,"brief":65},"over-400-arch-linux-aur-packages-hijacked-to-deploy-infostealer-and-ebpf-rootkit-856c09","Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit","2026-06-12T19:33:25+00:00","Over 400 Arch Linux AUR packages compromised to deploy infostealer and eBPF rootkit.",{"slug":67,"title":68,"published_at":69,"brief":70},"atomic-arch-campaign-hijacks-20-linux-aur-packages-to-deliver-malware-c336a7","Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware","2026-06-12T18:17:16+00:00","Atomic Arch campaign hijacks 20+ Linux AUR packages to deliver malware via ownership transfers.",{"slug":72,"title":73,"published_at":74,"brief":75},"over-100-npm-pypi-packages-hit-in-new-shai-hulud-supply-chain-attacks-58c2a0","Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks","2026-06-09T11:37:11+00:00","Shai-Hulud worm infects over 100 NPM and PyPI packages with Miasma and Hades variants.",{"slug":77,"title":78,"published_at":79,"brief":80},"lazarus-group-uses-npm-brandjacking-campaign-to-target-developers-b1da38","Lazarus Group Uses npm Brandjacking Campaign to Target Developers","2026-06-04T12:35:11+00:00","Lazarus Group deploys malicious npm packages via brandjacking to target developers and steal credentials.",{"slug":82,"title":83,"published_at":84,"brief":85},"suspected-hijacked-developer-accounts-spread-npm-malware","Suspected Hijacked Developer Accounts Spread npm Malware","2026-03-26T11:53:46+00:00","Hijacked npm developer accounts spread credential-stealing malware packages sbx-mask and touch-adv.",{"total":87,"stories":88},0,[],[],[91,94,96,99,101,103],{"month":92,"reported":93,"affected":87},"2026-06-01",7,{"month":95,"reported":87,"affected":87},"2026-07-01",{"month":97,"reported":98,"affected":87},"2026-08-01",2,{"month":100,"reported":87,"affected":87},"2026-09-01",{"month":102,"reported":87,"affected":87},"2026-10-01",{"month":104,"reported":105,"affected":87},"2026-11-01",1]