Webinar Description
Key Takeaways
- Examines malware threats in open-source software dependencies, drawing on Sonatype’s Q3 2026 Open Source Malware Index
- Addresses how AI coding agents are accelerating dependency integration and introducing new attack vectors
- Covers credential theft, payload delivery, and supply chain compromise from malicious packages
- Designed for security professionals, developers, DevOps engineers, and IT leaders in organizations using open-source software
About the Webinar
This live virtual session from Sonatype explores how malware targeting open-source software is evolving alongside the adoption of AI coding agents in development workflows. The webinar presents findings from Sonatype’s Q3 2026 Open Source Malware Index and includes a demonstration of emerging attack patterns alongside a real-world threat case study.
Malware Risks in Open-Source Dependencies
The session focuses on how a single compromised package can escalate into broader organizational risk. Specific threats covered include credential theft, delivery of additional malicious payloads, and exploitation of trusted access within software supply chains. As AI coding agents increasingly automate the selection and integration of dependencies, the attack surface for malicious packages expands.
AI-Driven Threat Analysis
Sonatype experts will demonstrate how AI-driven analysis can help organizations identify risky packages and assess their potential impact. The presentation aims to provide practical insights into current threat patterns and how automated intelligence can support secure software delivery.
Who Should Attend
The webinar is intended for security researchers, application security leads, DevSecOps engineers, software development managers, product managers, and IT decision-makers. It is particularly relevant for teams in technology-driven organizations that rely on open-source components and need to manage supply chain risk while maintaining development velocity.