Sonatype Research Reveals OSS Malware Grows 75% as Yearly Open Source Downloads Surpass 9.8 Trillion
· Source: markets.financialcontent.com
In short
Sonatype's 2026 State of the Software Supply Chain report reveals that open source malware packages have grown 75% to over 1.233 million, while yearly downloads across major registries reached 9.8 trillion, up 67% year-over-year. The report highlights that AI-driven software recommendations can introduce supply chain risks, with GPT-5 hallucinating 27.8% of component versions and suggesting malware packages when operating without real-time intelligence. Automated cloud consumption now accounts for 86% of Maven Central traffic, straining shared infrastructure and increasing operational burdens across the open source ecosystem.
Read Original Article — Read the full article on the publisher’s site.
Tags: supply-chain, security, automation, malware, vulnerability, AI