Announcing Advanced Security for SonarQube Cloud Team plan

This SonarSource blog post announces that SonarQube Advanced Security (SCA, dependency-aware analysis, and malicious package detection) is now available to Cloud Team plan customers and uses recent high-profile supply-chain incidents—Axios (backdoored releases dropping a cross-platform RAT) and the Trivy compromise (backdoored binary and the CanisterWorm npm worm that compromised dozens of packages in seconds)—to illustrate why integrated dependency risk analysis and malware detection are critical to prevent rapid, large-scale infections.