Event JSON
{
"id": "3d6d41e06701dfe2dc70ac4113ba9d25fbb80ef6df34b14da8baa27ae9c132b9",
"pubkey": "fddf487eea9db57a6e320f80e5cb63de50bedf539695a41c0d447be6c23643e1",
"created_at": 1721255657,
"kind": 1,
"tags": [
[
"e",
"55a1970a93eca1cf6d1fc5265126f46d35fd7dbfb12978895493eca1209f26eb",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://mastodon.social/users/Edent/statuses/112804210741525815",
"activitypub"
]
],
"content": "Looks like it pulls in a script from `94.156.79.8` and does a bunch of other shady shit.\n\nI see it discussed at https://www.wordfence.com/blog/2024/06/an-inside-look-at-the-malware-and-techniques-used-in-the-wordpress-org-supply-chain-attack/\n\nBut I don't have any of those plugins.\n\nhttps://files.mastodon.social/media_attachments/files/112/804/205/116/749/144/original/0fbd9b1134d18fcb.png",
"sig": "9364e9b338f4060a5f7bf79396d57b96f2c3849d5e73ad4a859cc2c322e355e4842208415ffc3c2e3eec19f760b8d9b540fd22eff8fbc22ca9ab8c1ba5ee5f7e"
}