Hacker Backdoors 30 WordPress Plugins, Uses Ethereum Smart Contract to Evade Domain Blocking
A report by security researcher Austin Ginder says a buyer inserted backdoor code into WordPress plugins after an acquisition, left it dormant for 243 days, and used an Ethereum smart contract to update C2 infrastructure. WordPress.org later removed more than 30 plugins in one day.








