[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:sonatype":3},{"vendor":4,"products":15,"links":27,"research":38,"news":81,"iocs":84,"iocs_total":82,"activity":85},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"sonatype","Sonatype","sonatype.com","https:\u002F\u002Fwww.sonatype.com\u002F","US","Software supply chain company and steward of Maven Central.","\u002Fvendor-logos\u002Fsonatype.png","#2d36ec","Sonatype provides intelligence & automated governance to help you build faster & safer with open source and AI. From the creators of Nexus Repository.","2026-10-16T13:44:14.696902+00:00",[16],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.","Sonatype Firewall blocks malicious code and packages before they enter your software supply chain. Protect your repositories and builds.",[23],{"slug":24,"name":25,"problem":26},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[28,32,35],{"kind":29,"label":30,"url":31},"review","PeerSpot: Sonatype Lifecycle user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fsonatype-lifecycle-reviews",{"kind":29,"label":33,"url":34},"Gartner Peer Insights: Sonatype Repository Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsonatype-repository-firewall",{"kind":29,"label":36,"url":37},"PeerSpot: Sonatype Repository Firewall user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fsonatype-repository-firewall-reviews",{"total":39,"stories":40},10,[41,46,51,56,61,66,71,76],{"slug":42,"title":43,"published_at":44,"brief":45},"91-vulnerabilities-patched-in-spring-application-framework-6dfa71","91 Vulnerabilities Patched in Spring Application Framework","2026-08-24T11:58:28+00:00","Spring application framework releases updates patching 91 vulnerabilities, including one critical.",{"slug":47,"title":48,"published_at":49,"brief":50},"nearly-800-malicious-npm-packages-deliver-cross-platform-rat-and-infostealer-7f2f00","Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer","2026-08-07T18:48:17+00:00","Nearly 800 malicious npm packages deliver cross-platform RAT and infostealer.",{"slug":52,"title":53,"published_at":54,"brief":55},"atomic-arch-supply-chain-attack-hits-1-500-aur-packages-b91ed3","Atomic Arch Supply Chain Attack Hits 1,500 AUR Packages","2026-06-16T10:51:49+00:00","Arch Linux suspends AUR account registrations due to a supply chain attack impacting over 1,500 packages.",{"slug":57,"title":58,"published_at":59,"brief":60},"over-400-arch-linux-aur-packages-hijacked-to-deploy-infostealer-and-ebpf-rootkit-856c09","Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit","2026-06-12T19:33:25+00:00","Over 400 Arch Linux AUR packages compromised to deploy infostealer and eBPF rootkit.",{"slug":62,"title":63,"published_at":64,"brief":65},"atomic-arch-campaign-hijacks-20-linux-aur-packages-to-deliver-malware-c336a7","Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware","2026-06-12T18:17:16+00:00","Atomic Arch campaign hijacks 20+ Linux AUR packages to deliver malware via ownership transfers.",{"slug":67,"title":68,"published_at":69,"brief":70},"over-100-npm-pypi-packages-hit-in-new-shai-hulud-supply-chain-attacks-58c2a0","Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks","2026-06-09T11:37:11+00:00","Shai-Hulud worm infects over 100 NPM and PyPI packages with Miasma and Hades variants.",{"slug":72,"title":73,"published_at":74,"brief":75},"lazarus-group-uses-npm-brandjacking-campaign-to-target-developers-b1da38","Lazarus Group Uses npm Brandjacking Campaign to Target Developers","2026-06-04T12:35:11+00:00","Lazarus Group deploys malicious npm packages via brandjacking to target developers and steal credentials.",{"slug":77,"title":78,"published_at":79,"brief":80},"suspected-hijacked-developer-accounts-spread-npm-malware","Suspected Hijacked Developer Accounts Spread npm Malware","2026-03-26T11:53:46+00:00","Hijacked npm developer accounts spread credential-stealing malware packages sbx-mask and touch-adv.",{"total":82,"stories":83},0,[],[],[86,88,91,93,96,98],{"month":87,"reported":82,"affected":82},"2026-05-01",{"month":89,"reported":90,"affected":82},"2026-06-01",7,{"month":92,"reported":82,"affected":82},"2026-07-01",{"month":94,"reported":95,"affected":82},"2026-08-01",2,{"month":97,"reported":82,"affected":82},"2026-09-01",{"month":99,"reported":82,"affected":82},"2026-10-01"]