https://blog.wpsec.com/eight-year-study-shows-the-dark-side-of-wordpress-plugins-2/
Eight-Year Study Shows the Dark Side of WordPress Plugins