Sonatype Repository FirewallSonatype Repository Firewall
Login

Firewall

Pro
Firewall Pro Dashboard
Unlock Firewall Pro

Protect Your Software Supply Chain

Monitor protection metrics in real time, investigate blocked components with detailed vulnerability data, and understand exactly what Sonatype Research has identified across the ecosystems your organization depends on.

Automatic metadata filtering for Maven, npm, PyPI, and NuGet
Dashboard with real-time protection metrics and threat visibility
Block malicious packages at download
Component-level vulnerability details powered by Sonatype Research (Coming Soon)
CSV export and API access for reporting and integration (Coming Soon)
Purchase Firewall ProLearn More

Active Malware in Upstream Ecosystems

These ecosystems are continuously monitored by Sonatype Research for active malware. Totals and new detection counts are updated daily and are independent of the dashboard timeframe filter.
npm82.8M+
+5728

151,239

total active malware
New malware, last 7 days
PyPI25.4M+
+1303

18,215

total active malware
New malware, last 7 days
Maven89.3M+
+1

350

total active malware
New malware, last 7 days
NuGet17.4M+
+81

149,978

total active malware
New malware, last 7 days