In July 2025, Flippa published a case study celebrating the six-figure sale of a WordPress plugin portfolio called Essential Plugin. The buyer, identified in subsequent security research only as “Kris,” had a background in SEO, cryptocurrency marketing, and online gambling. On May 12, 2025, a new committer account appeared in WordPress.org’s SVN system with access … Continue reading Flippa Promoted the Plugin Portfolio Sale as a Success Story. It Was a Supply Chain Attack.