CIRCLE WITH A DOT

@jeni Hard shell plastic? I bet it's hard shell plastic.

@greg_harvey Ah French rallies... this pic could have been taken any time the last 50 years

"Two supply chain attacks in two weeks. Both followed the same pattern.

Buy a trusted plugin with an established install base, inherit the #WordPress.org commit access, and inject malicious code. [...]

WordPress.org has no mechanism to flag or review plugin ownership transfers."

I wonder if the Drupal marketplace folks have considered ownership transfer issues...

Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them.

Last week, I wrote about catching a supply chain attack on a WordPress plugin called Widget Logic. A trusted name, acquired by a new owner, turned into

Anchor Hosting (anchor.host)