Do Son Sonatype uncovers the PolinRider loader in 12 releases across 10 hijacked packages. See how the npm PolinRider loader uses Ethereum to fetch malware.
Sonatype
Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.
Sonatype patches a critical 9.4 CVSS RCE in Nexus Repository 3 (CVE-2026-3199). Secure your supply chain—upgrade to version 3.91.0 immediately!
Are you using Nexus Repository Manager 2.x? Take action now to protect your systems from two critical vulnerabilities. Learn more about the security advisories and secure your software artifacts.
Sonatype has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-4956) in Nexus Repository