Watchdog Security Lite — Powered by Lumiverse Nexus

{
    "slug": "lumiverse-security-watchdog-lite",
    "previous_version": "3.8.3",
    "current_version": "4.3.2",
    "new_findings": [
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 654,
            "snippet": "array( 'pattern' => '/eval\\s*\\(\\s*atob\\s*\\(/i', 'reason' => 'Obfuscated JavaScript eval(atob()) payload' ),",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 867,
            "snippet": "'obfuscated eval(base64_decode',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1655,
            "snippet": "'eval(',",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1722,
            "snippet": "array( 'pattern' => '/eval\\s*\\(\\s*base64_decode\\s*\\(/i', 'reason' => 'Obfuscated eval(base64_decode()) execution chain' ),",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1657,
            "snippet": "'base64_decode(',",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1722,
            "snippet": "array( 'pattern' => '/eval\\s*\\(\\s*base64_decode\\s*\\(/i', 'reason' => 'Obfuscated eval(base64_decode()) execution chain' ),",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1658,
            "snippet": "'gzinflate(',",
            "confidence": "medium"
        },
        {
            "pattern": "preg_replace_e_mod",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1666,
            "snippet": "'preg_replace(\"/e',",
            "confidence": "medium"
        },
        {
            "pattern": "preg_replace_e_mod",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1667,
            "snippet": "\"preg_replace('/e\",",
            "confidence": "medium"
        },
        {
            "pattern": "createfunc",
            "kind": "builtin",
            "file": "includes/class-lvsw-scanner.php",
            "line": 1668,
            "snippet": "'create_function(',",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-lvsw-totp-2fa.php",
            "line": 358,
            "snippet": "$iv  = base64_decode( $parts[1], true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-lvsw-totp-2fa.php",
            "line": 359,
            "snippet": "$enc = base64_decode( $parts[2], true );",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "includes/class-lvsw-totp-2fa.php",
            "line": 368,
            "snippet": "$out = base64_decode( substr( $stored, 6 ), true );",
            "confidence": "medium"
        },
        {
            "pattern": "eval_call",
            "kind": "builtin",
            "file": "includes/class-lvsw-threat-intel-lite.php",
            "line": 460,
            "snippet": "foreach ( array( '/xmlrpc.php', '/wp-admin/setup-config.php', 'wp-config.php', '.env', '/.git/', 'debug.log', 'phpunit', 'eval(', 'base64_decode', 'union select', '../', '..%2f', 'cmd=', 'shell', '/",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 14
}

{
    "slug": "lumiverse-security-watchdog-lite",
    "author_slug": "bestseogr",
    "burst_start": "2026-09-07 19:53:43",
    "burst_end": "2026-09-07 20:00:49",
    "burst_commits": 17,
    "burst_window_minutes": 90,
    "tenure_days": 221,
    "distinct_messages": 5,
    "avg_message_length": 15.8,
    "top_message": "New Screenshots",
    "top_message_count": 8,
    "prt_revert": null,
    "explanation": "Established author committed 17 revisions inside a 90-minute window with low-entropy commit messages. Pattern matches the June 2024 wp.org credential-stuffing wave shape; bumped to critical when followed by a wp.org Plugin Review Team revert within 7 days."
}