Skip to main content
Signal8

Full Access with Signal8 Pro, $49/mo billed annually.

Sonatype and Forrester Address the Growing AI-Era Software Supply Chain Risk Facing Indian Enterprises in the Guru Forum

$FORRPress releaseJul 29, 2026, 12:18 AM ETRead the release

Forrester partnered with Sonatype to host the Guru Forum in Hyderabad, addressing software supply chain risks in the AI era. The event highlighted research showing targeted malicious package advisories increased 75-fold from 2023 to 2025, with nearly half impersonating trusted software.

Key figures

Impersonation rate
47%
Advanced technique rate
>25%
Install time attack rate
53%
Malicious advisories 2023
28
Malicious advisories 2025
1576
Total advisories analyzed
9747
Malicious package growth 2023 to 2025
75-fold

AI analysis

The rest of the AI analysis, red flags and sentiment are part of Signal8 Pro.

AI-generated analysis of a public disclosure. Not investment advice; verify against the original document.