A malicious actor recently purchased 30 WordPress plugins and embedded backdoors into all of them, escalating a growing trend of supply chain attacks. This follows a similar incident involving the Widget Logic plugin, where a new owner compromised a trusted name to distribute malicious code. The coordinated compromise highlights the ongoing security risks associated with third-party plugin acquisitions in the WordPress ecosystem.