ShapedPlugin has confirmed a significant supply chain security breach that resulted in backdoored software being distributed to its paying customers. The incident highlights the risks associated with compromised plugin development environments and the potential for widespread impact on end-user websites. Security researchers identified the malicious code, which was designed to facilitate unauthorized access. The company is currently working to remediate the vulnerability and notify affected clients. How can developers better secure their plugin distribution pipelines?
Source: https://www.cybersecurity-insiders.com/shapedplugin-supply-chain-security-breach-backdoor/
