'Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them' — Stuart Breckenridge

Last week, I wrote about catching a supply chain attack on a WordPress plugin called Widget Logic. A trusted name, acquired by a new owner, turned into something malicious.