Events

247 events resolved (filtered). · Last rule pass 7h ago. · 4 open / 4,675 resolved overall.

State: Open Resolved All
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 25d ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 25d ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 25d ago
Slugspeed-analyzer
Author slugdalibord
Burst start2026-08-31 08:09:43
Burst end2026-08-31 08:15:52
Burst commits26
Burst window minutes90
Tenure days452
Distinct messages4
Avg message length7
Top message1.18.6
Top message count23
Prt revert—
ExplanationEstablished author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-08-31 08:09:43",
    "burst_end": "2026-08-31 08:15:52",
    "burst_commits": 26,
    "burst_window_minutes": 90,
    "tenure_days": 452,
    "distinct_messages": 4,
    "avg_message_length": 6.5,
    "top_message": "1.18.6",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 25d ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (400 installs) Resolved 25d ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 25d ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 25d ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 25d ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 25d ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Jetpack – WP Security, Backup, Speed, & Growth (3M+ installs) Resolved 25d ago
Slugjetpack
Author slugkraftbj
Burst start2026-09-01 13:55:26
Burst end2026-09-01 15:08:06
Burst commits43
Burst window minutes90
Tenure days2,735
Distinct messages43
Avg message length14
Top messageJetpack 16.1.3
Top message count1
Prt revert—
ExplanationEstablished author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "jetpack",
    "author_slug": "kraftbj",
    "burst_start": "2026-09-01 13:55:26",
    "burst_end": "2026-09-01 15:08:06",
    "burst_commits": 43,
    "burst_window_minutes": 90,
    "tenure_days": 2735,
    "distinct_messages": 43,
    "avg_message_length": 14.3,
    "top_message": "Jetpack 16.1.3",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 26d ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 26d ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 26d ago
Slugspeed-analyzer
Author slugdalibord
Burst start2026-08-31 08:09:43
Burst end2026-08-31 08:15:52
Burst commits26
Burst window minutes90
Tenure days452
Distinct messages4
Avg message length7
Top message1.18.6
Top message count23
Prt revert—
ExplanationEstablished author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-08-31 08:09:43",
    "burst_end": "2026-08-31 08:15:52",
    "burst_commits": 26,
    "burst_window_minutes": 90,
    "tenure_days": 452,
    "distinct_messages": 4,
    "avg_message_length": 6.5,
    "top_message": "1.18.6",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 26d ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (400 installs) Resolved 26d ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 26d ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 26d ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 26d ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 26d ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Jetpack – WP Security, Backup, Speed, & Growth (3M+ installs) Resolved 26d ago
Slugjetpack
Author slugkraftbj
Burst start2026-09-01 13:55:26
Burst end2026-09-01 15:08:06
Burst commits43
Burst window minutes90
Tenure days2,735
Distinct messages43
Avg message length14
Top messageJetpack 16.1.3
Top message count1
Prt revert—
ExplanationEstablished author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "jetpack",
    "author_slug": "kraftbj",
    "burst_start": "2026-09-01 13:55:26",
    "burst_end": "2026-09-01 15:08:06",
    "burst_commits": 43,
    "burst_window_minutes": 90,
    "tenure_days": 2735,
    "distinct_messages": 43,
    "avg_message_length": 14.3,
    "top_message": "Jetpack 16.1.3",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 26d ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 26d ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 26d ago
Slugspeed-analyzer
Author slugdalibord
Burst start2026-08-31 08:09:43
Burst end2026-08-31 08:15:52
Burst commits26
Burst window minutes90
Tenure days452
Distinct messages4
Avg message length7
Top message1.18.6
Top message count23
Prt revert—
ExplanationEstablished author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-08-31 08:09:43",
    "burst_end": "2026-08-31 08:15:52",
    "burst_commits": 26,
    "burst_window_minutes": 90,
    "tenure_days": 452,
    "distinct_messages": 4,
    "avg_message_length": 6.5,
    "top_message": "1.18.6",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 26d ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (400 installs) Resolved 26d ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 26d ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 26d ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 26d ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 26d ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Jetpack – WP Security, Backup, Speed, & Growth (3M+ installs) Resolved 26d ago
Slugjetpack
Author slugkraftbj
Burst start2026-09-01 13:55:26
Burst end2026-09-01 15:08:06
Burst commits43
Burst window minutes90
Tenure days2,735
Distinct messages43
Avg message length14
Top messageJetpack 16.1.3
Top message count1
Prt revert—
ExplanationEstablished author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "jetpack",
    "author_slug": "kraftbj",
    "burst_start": "2026-09-01 13:55:26",
    "burst_end": "2026-09-01 15:08:06",
    "burst_commits": 43,
    "burst_window_minutes": 90,
    "tenure_days": 2735,
    "distinct_messages": 43,
    "avg_message_length": 14.3,
    "top_message": "Jetpack 16.1.3",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Jetpack – WP Security, Backup, Speed, & Growth (3M+ installs) Resolved 27d ago
Slugjetpack
Author slugkraftbj
Burst start2026-09-01 13:55:26
Burst end2026-09-01 15:08:06
Burst commits43
Burst window minutes90
Tenure days2,735
Distinct messages43
Avg message length14
Top messageJetpack 16.1.3
Top message count1
Prt revert—
ExplanationEstablished author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "jetpack",
    "author_slug": "kraftbj",
    "burst_start": "2026-09-01 13:55:26",
    "burst_end": "2026-09-01 15:08:06",
    "burst_commits": 43,
    "burst_window_minutes": 90,
    "tenure_days": 2735,
    "distinct_messages": 43,
    "avg_message_length": 14.3,
    "top_message": "Jetpack 16.1.3",
    "top_message_count": 1,
    "prt_revert": null,
    "explanation": "Established author committed 43 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 27d ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 27d ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 27d ago
Slugspeed-analyzer
Author slugdalibord
Burst start2026-08-31 08:09:43
Burst end2026-08-31 08:15:52
Burst commits26
Burst window minutes90
Tenure days452
Distinct messages4
Avg message length7
Top message1.18.6
Top message count23
Prt revert—
ExplanationEstablished author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-08-31 08:09:43",
    "burst_end": "2026-08-31 08:15:52",
    "burst_commits": 26,
    "burst_window_minutes": 90,
    "tenure_days": 452,
    "distinct_messages": 4,
    "avg_message_length": 6.5,
    "top_message": "1.18.6",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 27d ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (400 installs) Resolved 27d ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 27d ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 27d ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 27d ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 27d ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Speed Analyzer – Speed Test & Performance Audit (100 installs) Resolved 28d ago
Slugspeed-analyzer
Author slugdalibord
Burst start2026-08-31 08:09:43
Burst end2026-08-31 08:15:52
Burst commits26
Burst window minutes90
Tenure days452
Distinct messages4
Avg message length7
Top message1.18.6
Top message count23
Prt revert—
ExplanationEstablished author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "speed-analyzer",
    "author_slug": "dalibord",
    "burst_start": "2026-08-31 08:09:43",
    "burst_end": "2026-08-31 08:15:52",
    "burst_commits": 26,
    "burst_window_minutes": 90,
    "tenure_days": 452,
    "distinct_messages": 4,
    "avg_message_length": 6.5,
    "top_message": "1.18.6",
    "top_message_count": 23,
    "prt_revert": null,
    "explanation": "Established author committed 26 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 28d ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Custom Recovery Mode Email (100 installs) Resolved 28d ago
Slugcustom-recovery-mode-email
Author slugjairo.ochoa
Burst start2026-08-12 15:01:03
Burst end2026-08-12 16:15:05
Burst commits20
Burst window minutes90
Tenure days2,420
Distinct messages2
Avg message length13
Top messageRelease 2.0.0
Top message count17
Prt revert—
ExplanationEstablished author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "custom-recovery-mode-email",
    "author_slug": "jairo.ochoa",
    "burst_start": "2026-08-12 15:01:03",
    "burst_end": "2026-08-12 16:15:05",
    "burst_commits": 20,
    "burst_window_minutes": 90,
    "tenure_days": 2420,
    "distinct_messages": 2,
    "avg_message_length": 13,
    "top_message": "Release 2.0.0",
    "top_message_count": 17,
    "prt_revert": null,
    "explanation": "Established author committed 20 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst Login via Yandex – вход через Яндекс ID (100 installs) Resolved 28d ago
Sluglogin-via-yandex
Author slugdllpl
Burst start2026-08-19 13:24:07
Burst end2026-08-19 13:56:06
Burst commits18
Burst window minutes90
Tenure days675
Distinct messages3
Avg message length16
Top messageRelease version 2.0.0
Top message count11
Prt revert—
ExplanationEstablished author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "login-via-yandex",
    "author_slug": "dllpl",
    "burst_start": "2026-08-19 13:24:07",
    "burst_end": "2026-08-19 13:56:06",
    "burst_commits": 18,
    "burst_window_minutes": 90,
    "tenure_days": 675,
    "distinct_messages": 3,
    "avg_message_length": 15.7,
    "top_message": "Release version 2.0.0",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 18 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst bbPress Voting (400 installs) Resolved 28d ago
Slugbbp-voting
Author slugnatekinkead
Burst start2026-08-13 20:54:54
Burst end2026-08-13 21:31:47
Burst commits16
Burst window minutes90
Tenure days2,957
Distinct messages13
Avg message length22
Top messageUpdating assets
Top message count4
Prt revert—
ExplanationEstablished author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "bbp-voting",
    "author_slug": "natekinkead",
    "burst_start": "2026-08-13 20:54:54",
    "burst_end": "2026-08-13 21:31:47",
    "burst_commits": 16,
    "burst_window_minutes": 90,
    "tenure_days": 2957,
    "distinct_messages": 13,
    "avg_message_length": 22.1,
    "top_message": "Updating assets",
    "top_message_count": 4,
    "prt_revert": null,
    "explanation": "Established author committed 16 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst DPD Baltic Shipping (2k+ installs) Resolved 28d ago
Slugwoo-shipping-dpd-baltic
Author slugdpdbaltics
Burst start2026-08-19 09:32:54
Burst end2026-08-19 09:35:52
Burst commits12
Burst window minutes90
Tenure days2,662
Distinct messages3
Avg message length34
Top message1.2.92 upload trunk folder files2
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "woo-shipping-dpd-baltic",
    "author_slug": "dpdbaltics",
    "burst_start": "2026-08-19 09:32:54",
    "burst_end": "2026-08-19 09:35:52",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2662,
    "distinct_messages": 3,
    "avg_message_length": 34.2,
    "top_message": "1.2.92 upload trunk folder files2",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst ePayco plugin for WooCommerce (3k+ installs) Resolved 28d ago
Slugepayco-gateway
Author slugepayco
Burst start2026-08-20 18:26:29
Burst end2026-08-20 18:58:45
Burst commits22
Burst window minutes90
Tenure days1,533
Distinct messages20
Avg message length18
Top messageremove
Top message count3
Prt revert—
ExplanationEstablished author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "epayco-gateway",
    "author_slug": "epayco",
    "burst_start": "2026-08-20 18:26:29",
    "burst_end": "2026-08-20 18:58:45",
    "burst_commits": 22,
    "burst_window_minutes": 90,
    "tenure_days": 1533,
    "distinct_messages": 20,
    "avg_message_length": 18,
    "top_message": "remove",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 22 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst MultiParcels Shipping For WooCommerce (4k+ installs) Resolved 28d ago
Slugmultiparcels-shipping-for-woocommerce
Author slugmultiparcels
Burst start2026-08-17 08:00:42
Burst end2026-08-17 08:05:32
Burst commits13
Burst window minutes90
Tenure days2,762
Distinct messages3
Avg message length37
Top message1.30.37 upload new trunk folder files
Top message count11
Prt revert—
ExplanationEstablished author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "multiparcels-shipping-for-woocommerce",
    "author_slug": "multiparcels",
    "burst_start": "2026-08-17 08:00:42",
    "burst_end": "2026-08-17 08:05:32",
    "burst_commits": 13,
    "burst_window_minutes": 90,
    "tenure_days": 2762,
    "distinct_messages": 3,
    "avg_message_length": 37.4,
    "top_message": "1.30.37 upload new trunk folder files",
    "top_message_count": 11,
    "prt_revert": null,
    "explanation": "Established author committed 13 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst WP Travel – Ultimate Travel Booking System, Tour Management Engine (3k+ installs) Resolved 28d ago
Slugwp-travel
Author slugwptravel
Burst start2026-08-17 06:08:46
Burst end2026-08-17 06:34:35
Burst commits12
Burst window minutes90
Tenure days2,781
Distinct messages3
Avg message length19
Top messageadded updated files
Top message count10
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "wp-travel",
    "author_slug": "wptravel",
    "burst_start": "2026-08-17 06:08:46",
    "burst_end": "2026-08-17 06:34:35",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 2781,
    "distinct_messages": 3,
    "avg_message_length": 18.8,
    "top_message": "added updated files",
    "top_message_count": 10,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}
High compromised_committer_burst No Register & Comments XD (60 installs) Resolved 29d ago
Slugno-register-comments-xd
Author slugmuhammadalikhizar
Burst start2026-08-18 08:19:09
Burst end2026-08-18 08:46:56
Burst commits12
Burst window minutes90
Tenure days515
Distinct messages3
Avg message length11
Top messageNewer Version
Top message count7
Prt revert—
ExplanationEstablished author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days.
View raw JSON
{
    "slug": "no-register-comments-xd",
    "author_slug": "muhammadalikhizar",
    "burst_start": "2026-08-18 08:19:09",
    "burst_end": "2026-08-18 08:46:56",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 515,
    "distinct_messages": 3,
    "avg_message_length": 10.7,
    "top_message": "Newer Version",
    "top_message_count": 7,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}