profaceoff

@profaceoff · wordpress.org profile ↗
Takeover pattern detected
This account joined 5 established plugins over 11 days .
Account age at first join
26 days
First join
2022-03-04
Latest join
2022-03-15
Combined install base
130
Sudden appearance of one account as committer across many long-lived plugins is the exact signature of a portfolio-purchase supply-chain attack. See the bulk_committer_takeover rule.
Member since
2022-02-06
Location
Employer
Job title
Authored
0
SVN commit access
3 (2 closed)
Readme contributor
5
Combined install base
130 across 5 plugins
This account has SVN commit access on 3 plugins but isn't listed as the primary author of any currently-listed plugin — which typically means their authored plugins are closed, or they took over commit access on someone else's plugins. Worth examining closely.

Alerts (1)

High bulk_committer_takeover Protect WordPress Videos 2h ago
Committerprofaceoff
Member since2022-02-06
Plugins joined5
Spread days11
Earliest join2022-03-04 03:19:28
Latest join2022-03-15 08:23:32
Combined installs130
Sample plugins
SlugActive installsFirst commit at
protect-wp-videos1002022-03-15 07:23:53
link-to-wp-files202022-03-15 08:23:32
protect-pages-posts102022-03-15 08:16:24
animated-text02022-03-15 08:20:50
wp-s3-smart-upload02022-03-04 03:19:28
View raw JSON
{
    "committer": "profaceoff",
    "member_since": "2022-02-06",
    "plugins_joined": 5,
    "spread_days": 11,
    "earliest_join": "2022-03-04 03:19:28",
    "latest_join": "2022-03-15 08:23:32",
    "combined_installs": 130,
    "sample_plugins": [
        {
            "slug": "protect-wp-videos",
            "active_installs": 100,
            "first_commit_at": "2022-03-15 07:23:53"
        },
        {
            "slug": "link-to-wp-files",
            "active_installs": 20,
            "first_commit_at": "2022-03-15 08:23:32"
        },
        {
            "slug": "protect-pages-posts",
            "active_installs": 10,
            "first_commit_at": "2022-03-15 08:16:24"
        },
        {
            "slug": "animated-text",
            "active_installs": 0,
            "first_commit_at": "2022-03-15 08:20:50"
        },
        {
            "slug": "wp-s3-smart-upload",
            "active_installs": 0,
            "first_commit_at": "2022-03-04 03:19:28"
        }
    ]
}

SVN commit access (3)

Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.

Plugin Primary author Installs Commits First Latest Status
SSU – WordPress Amazon S3 & Wasabi Smart File Uploads Plugin rexhoang 5 4y ago 2y ago Closed
Protect WordPress Videos gaupoit 100 2 4y ago 4y ago Active
WordPress Animated Text Plugin gaupoit 1 4y ago 4y ago Closed

Contributor on other plugins (5)

Plugins where this account is listed in the readme contributors (distinct from SVN commit access).