Nico23

1 linked audits · 16 IOCs catalogued · 20k+ headline-plugin installs · first seen 2026-07-29 · last activity 2026-07-29

Audits in this campaign

Malicious Closed by wp.org

Audit #51 Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … — 20k+ installs

Verdict: malicious. Advanced Responsive Video Embedder shipped an unauthenticated administrator-takeover backdoor in version 10.8.7, and then shipped three further backdoor components in 10.8.8, the release whose own commit message present…

baseline 10.8.6 → head 10.8.8 2d ago