Sonatype launches Nexus Repository Pro+ to block malicious components

Sonatype has unveiled Nexus Repository Pro+, which screens open source packages, AI models and MCP servers at request time and blocks or quarantines malicious or out-of-policy components before they reach a build. It draws on a catalog of over 333 million components and data on 1.9 million malicious versions.

• Checks happen at repository intake, not after the build
• Catalog covers more than 333 million components
• Sonatype has identified over 1.9 million malicious versions
• About 7% of Hugging Face requests were blocked by policy