WP Beacon – Watching the WordPress plugin supply chain – WP Beacon

WP Beacon watches every plugin on wordpress.org for the signs of a supply-chain attack — ownership transfers, dormant-then-activated takeovers, and release patterns that match known attacks.