Tampered JavaScript in three Awesome Motive plugins exposed WordPress sites to rogue admin accounts and hidden backdoors.
In response to recent software supply chain attacks, NPM version 12 is blocking the automatic script execution at install.