# \#vulnerability
**URL:** https://community.sonatype.com/tag/vulnerability/119.md
[Latest](https://community.sonatype.com/latest.md) · [Categories](https://community.sonatype.com/categories.md) · [Tags](https://community.sonatype.com/tags.md)
---
## [Malware vs. Vulnerability](https://community.sonatype.com/t/malware-vs-vulnerability/15067)
**Author:** [@jzora](https://community.sonatype.com/u/jzora)\
**Replies:** 4\
**Last updated:** [July 3, 2025, 2:00pm UTC](https://community.sonatype.com/t/malware-vs-vulnerability/15067 "2025-07-03T14:00:16Z")
Hi, folks! If you want to understand the current state of the software supply chain, you need to understand the difference between a vulnerability and malware. The short answer is: malware is worse, by an order of magni…
---
## [NXRM Log4j Visualizer feature available to the community!](https://community.sonatype.com/t/nxrm-log4j-visualizer-feature-available-to-the-community/7995)
**Author:** [@glee](https://community.sonatype.com/u/glee)\
**Replies:** 0\
**Last updated:** [January 6, 2022, 6:27pm UTC](https://community.sonatype.com/t/nxrm-log4j-visualizer-feature-available-to-the-community/7995 "2022-01-06T18:27:19Z")
Hi Sonatype Community, Concerned about Log4j? We can help! The new Log4j visualizer in Nexus Repository 3.37.3 provides greater visibility into Maven Log4j component downloads impacted by CVE-2021-4428. This experimenta…
---
## [Component group name changes for same library](https://community.sonatype.com/t/component-group-name-changes-for-same-library/3544)
**Author:** [@ron.ogle](https://community.sonatype.com/u/ron.ogle)\
**Replies:** 0\
**Last updated:** [February 20, 2020, 7:19pm UTC](https://community.sonatype.com/t/component-group-name-changes-for-same-library/3544 "2020-02-20T19:19:23Z")
We have component libraries where the group name has changed for the same library. Nexus IQ does NOT show the new version in the component info tab. The vulnerability information sometimes mentions newer versions; howe…