https://blog.wpsec.com/wordpress-supply-chain-cyber-attacks/
What Are WordPress Supply Chain Attacks (And How Can You Protect Against Them)?