Sonatype · Blogs

Blogs listings from Sonatype on TechiSeek. 11 public listings.

• AI Noise Is the New Development Bottleneck (Sonatype)
  AI-generated dependency decisions can create costly noise and rework. Learn how live intelligence and guardrails improve precision in the S…
• Limits of Java Certificate Bypass: Fingerprint Blocklist Insights (Sonatype)
  Sonatype reproduced a Java certificate bypass showing how re-encoded eMudhra intermediates can evade exact-fingerprint blocklists.
• The New Release Metric: Less Cleanup Per Release (Sonatype)
  Reliable releases are more important than AI code output. Learn how measuring cleanup per release reveals the real value of AI-assisted dev…
• Q3 2026 Open Source Malware Index: When Compromise Compounds (Sonatype)
  Q3 open source malware findings show how droppers, stolen credentials, and AI-driven workflows can turn one compromise into broader supply…
• Shadow AI Across Government: It's Three Problems, Not One (Sonatype)
  Shadow AI creates three distinct government risks: data leaving, AI-generated code returning, and models entering builds. Learn who owns ea…
• Hijacked TensorLake npm Turned Install Into Credential Risk (Sonatype)
  A hijacked TensorLake npm release used a preinstall hook to steal credentials, run remote commands, and potentially expose data through Git…
• eMudhra CA Incident: Sonatype's Assessment and Guidance (Sonatype)
  Sonatype is responding to the eMudhra CA incident. Learn which products are affected and the certificate trust-store updates customers shou…
• PHP2Shell Makes PHP Inventory and Patch Ownership Urgent (Sonatype)
  PHP2Shell exposes critical PHP flaws that can enable unauthenticated remote code execution. Learn how to inventory, patch, and verify affec…
• A Protected Browser Doesn't Mean Your Enterprise Is Remediated (Sonatype)
  Browser updates are only the start of eMudhra remediation. Learn how to identify certificate trust gaps across developer tools, runtimes an…
• Trust What Ships: Your Repository Is Now Your First Defense (Sonatype)
  Nexus Repository helps enterprise teams block malicious, vulnerable, and out-of-policy components before they enter developer, agent, and b…
• How Maven Central Builds Trust Into Dependency Delivery (Sonatype)
  Maven Central is more than a download source. Learn how predictable publication, metadata, availability, and operations build trust in depe…