MEDIUMSupply Chain
Global

Software Dependency Cooldowns Are a Symptom, Not a Strategy

·Source: Sonatype (Maven/npm)

Updated:

Executive Summary

<img src="https://www.sonatype.com/hubfs/blog_dependency_cooldown.jpg" alt="Image with triangle shape at center containing an exclamation point, signifying a notification icon. Triangle is at center of line connectors to

Analysis

Open source does not move too fast.

Indicators of Compromise (3)

URL (2)
https://www.sonatype.com/blog/software-dependency-cooldowns-are-a-symptom-not-a-strategy
VirusTotalURLhaus
https://www.sonatype.com/hubfs/blog_dependency_cooldown.jpg
VirusTotalURLhaus
Domain (1)
www.sonatype.com
VirusTotalURLhaus
Source Attribution

Originally published by Sonatype (Maven/npm) on Jun 15, 2026.

Related Threats

MEDIUMSupply Chain

Atomic Arch Supply Chain Attack Hits 1,500 AUR Packages

Arch Linux suspended account registrations in response to the wave of malicious packages being uploaded to AUR. The post Atomic Arch Supply Chain Attack Hits 1,500 AUR Packages appeared first on SecurityWeek .

SecurityWeek
CRITICALSupply Chain

Cisco patches SD-WAN flaw amid evidence of active exploitation

Cisco has released fixes for a vulnerability in its Catalyst SD-WAN Manager software after becoming aware of limited exploitation of the flaw, which could allow an authenticated attacker to create or overwrite files that may later be used to gain root privileges. The vulnerability, tracked as CVE-2026 – 20262 , affects the web interface of Cisco Catalyst SD-WAN Manager, formerly known as SD-WAN vM

CSO Online
MEDIUMSupply Chain

OptinMonster WordPress plugin hacked in CDN supply-chain attack

WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack impacting Awesome Motive-s content distribution network (CDN). [...]

BleepingComputer