Coupons+

{
    "slug": "coupons-plus-for-woocommerce",
    "previous_version": "1.3.0",
    "current_version": "1.6.0",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/voku/portable-utf8/src/voku/helper/UTF8.php",
            "line": 1116,
            "snippet": "$str = \\base64_decode($str, \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/voku/portable-utf8/src/voku/helper/UTF8.php",
            "line": 2776,
            "snippet": "$base64String = \\base64_decode($str, \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/voku/anti-xss/src/voku/helper/AntiXSS.php",
            "line": 1131,
            "snippet": "$strTmp = \\base64_decode($strings[1], \\true);",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "vendor-prefixed/voku/stringy/src/Stringy.php",
            "line": 341,
            "snippet": "return static::create(\\base64_decode($this->str, \\true), $this->encoding);",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "vendor-prefixed/nesbot/carbon/src/Carbon/Traits/Mixin.php",
            "line": 91,
            "snippet": "$context = eval(self::getAnonymousClassCodeForTrait($trait));",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 5
}

{
    "slug": "coupons-plus-for-woocommerce",
    "author_slug": "neblabs",
    "burst_start": "2026-09-07 05:17:43",
    "burst_end": "2026-09-07 06:27:16",
    "burst_commits": 12,
    "burst_window_minutes": 90,
    "tenure_days": 286,
    "distinct_messages": 5,
    "avg_message_length": 32.7,
    "top_message": "Preparing new tags/1.4.0 with old trunk",
    "top_message_count": 3,
    "prt_revert": null,
    "explanation": "Established author committed 12 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}