Codeandcore

2 linked audits · 0 IOCs catalogued · 120 headline-plugin installs · first seen 2026-05-06 · last activity 2026-05-08

Audits in this campaign

Suspicious

Audit #34 Speedy Go — 20 installs

Verdict: SUSPICIOUS. Speedy Go v2.1.0 (released 2026-05-04) is a hostile-shape release pushed to the wp.org slug under the legitimate author's account. The changelog literally advertises "Bypassed all API key and license verification requi…

baseline 2.0.3 → head 2.1.0 1mo ago

Suspicious

Audit #38 WYSIWYG Character Limit for ACF — 100 installs

Verdict: SUSPICIOUS. On 2026-05-06, codeandcore released v4.1.2 of WYSIWYG Character Limit for ACF with a single line change: the activation/opt-in/uninstall tracker that POSTed to wordpress-plugins.pro/receiver.php was switched back to re…

baseline 4.1.1 → head 4.1.2 1mo ago