PSA: Massive Supply Chain Attack hitting BdThemes - Audit your Elementor add-ons now.
Hey everyone, just a heads up if you or your clients are using any plugins from BdThemes (they make a lot of popular Elementor add-ons). There's an active supply chain attack currently unfolding.
From what is being reported, attackers managed to compromise the update mechanism. This means that even if you think you are just doing a routine plugin update, it might be pulling a malicious payload directly into your site.
If you have any of their plugins installed, I highly recommend disabling them or checking your file integrity immediately until there is absolute clarity from the developers. Stay safe and double-check your client sites today!
[link] [comments]