BdThemes: A WordPress Supply Chain Attack That Changed No Code At All

Summary Not a single source code file in the WordPress.org repository was modified. No plugin update was released. No file on disk changed. Yet rogue administrator accounts were created on victim site