#plugin’s


BdThemes plugins supply-chain hack creates rogue WordPress admins

Aug 11, 2026 // 00:56

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators’ […]

BdThemes plugins supply-chain hack creates rogue WordPress admins

Aug 11, 2026 // 00:56

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators’ […]

Hackers abuse Notepad++ plugins to stealthily install malware

Jul 23, 2026 // 19:36

Ukraine’s CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish […]

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

Jun 22, 2026 // 21:04

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release channels and […]

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Jun 17, 2026 // 15:01

Cybersecurity researchers have flagged a “coordinated malware campaign” on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial […]

Malicious JetBrains Marketplace plugins steal AI API keys from developers

Jun 17, 2026 // 00:56

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. The campaign, discovered by Aikido Security, […]