Maven Central security

Key Takeaways A package published one namespace segment away from Jackson served Cobalt Strike from Maven Central in December 2025, no CVE involved. Maven Central verifies control of a namespace’s...