Application Security
Sonatype warns of surge in trusted open-source malware
Attackers hid malware in familiar package workflows, prompting Sonatype to log 21,764 malicious open-source packages in the quarter.
By Shannon Williams
•
4 min read
•
Wed, 15th Apr 2026