His AI checks WordPress plugins daily and found malware
He set up an AI for his WP Beacon project to check WordPress plugins every day. After two weeks of daily checks it pinged him about malware in the InstaWP Connect plugin, and wordpress.org closed the listing that afternoon and restored it the next morning.
How it works
- Sets up an AI for WP Beacon
- Bot runs daily checks for two weeks
- Bot pings him about malware in the trunk of InstaWP Connect
- Wordpress.org closes the listing that afternoon
- Listing is restored the next morning
Why it’s worth knowing
His own AI bot spotted malware in a WordPress plugin on a daily check, and the plugin listing was closed the same afternoon.
Where it’s from
Summarized from a public post on bsky.app. See the original ↗