BrianKrebs on Nostr: This discussion atop Hackernews right now about how someone bought 30 WordPress ...
This discussion atop Hackernews right now about how someone bought 30 WordPress plugins and planted a backdoor in all of them has me wondering, is there a plugin that blocks plugins from being automagically updated if the plugin's ownership changes?
https://news.ycombinator.com/item?id=47755629#47756259Published at
2026-04-14 12:44:08 UTCEvent JSON
{
"id": "4b1911b7ba090a1c3855101c534ae40d70c44c7660d129e7620f7acedf706de8",
"pubkey": "662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d",
"created_at": 1776170648,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@briankrebs/116403119598798035",
"web"
],
[
"proxy",
"https://infosec.exchange/users/briankrebs/statuses/116403119598798035",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/briankrebs/statuses/116403119598798035",
"pink.momostr"
],
[
"-"
]
],
"content": "This discussion atop Hackernews right now about how someone bought 30 WordPress plugins and planted a backdoor in all of them has me wondering, is there a plugin that blocks plugins from being automagically updated if the plugin's ownership changes?\n\nhttps://news.ycombinator.com/item?id=47755629#47756259",
"sig": "ce5daa0d7fc27932a7903cc499ee6596f321d78ffe374558433bcfda7bb2f84d9140fc3fb471d5df52ef86b2553ef81d513397b683aa8cb07c2d33370e0a75b8"
}
