What We Learned from Studying 36,000 OSS Projects | Press Release

Products
Security Research
Solutions
Resources
- Success Stories
- White Papers
- Webinars
- Partners
- Exchange
- Training
- Videos
- Documentation
- Community
- Support
About
Blog
FREE APP SCAN

Sonatype-2020-0003 - npm malicious package 1337qq-js

Typically when an advisory about a “bad” open source software component hits the news, the story is somewhat dire - but not this time. More on Sonatype-2020-0003 - npm malicious package 1337qq-js...

Twitter
LinkedIn
Facebook
Instagram
YouTube
GitHub

Products

Nexus Firewall
Nexus Lifecycle
Nexus Lifecycle Foundation
Nexus Auditor
Nexus Repository Pro
Nexus Repository OSS
Pricing

Security Research

Nexus Intelligence
CVE Insights
Central Security Project
Nexus Vulnerability Scanner
OSS Licensing

Solutions

Developers
AppSec
DevSecOps
Financial Services
Manufacturing
Technology
Healthcare
Government

Resources

Success Stories
White Papers
Webinars
Partners
Exchange
Training
Videos
Documentation
Community
Support

About

About Sonatype
Events
Management
Board of Directors
Investors
Press Releases
Media Coverage
Careers
Contact Us

Products
Customers
Resources
About

Twitter
LinkedIn
Facebook
Google+
YouTube
GitHub

Sonatype Headquarters - 8161 Maple Lawn Blvd #250, Fulton, MD 20759
Tysons Office - 8281 Greensboro Drive – Suite 630, McLean, VA 22102
Australia Office - 5 Martin Place, Sydney, NSW 2000, Australia
London Office - 199 Bishopsgate, London EC2M 3TY

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.

Terms of Service Privacy Policy

window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-137036301-1');