Managing Malware Alerts in Sonatype Nexus Repository

This guide addresses the management of malware alerts within Sonatype Nexus Repository OSS and Repository Pro. It explains the significance of the Malware Warning Banner that appears when open source malware is detected, indicating the presence of malware and the number of instances found. The document outlines the urgency of addressing these alerts, as they represent an active threat to systems. It details the distinction between open source malware and vulnerabilities, emphasizing the immediate risk posed by malware. The guide also describes the identification process of malware in proxy repositories through Repository Health Check capabilities, which run evaluations every 24 hours. Additionally, it includes frequently asked questions that clarify the nature of malware, its detection, and the necessary actions to mitigate risks. The document stresses the importance of prompt action to prevent further damage and the limitations of existing security tools in addressing open source malware threats.