Supply-chain attacksBriefConfirmed by two or more outlets
TeamUpdraft (UpdraftPlus vendor) key compromise
UpdraftCentral, Vault and Clone keys stolen.
- Disclosed
What happened
- UpdraftCentral, Vault and Clone keys stolen. 99+ malicious plugin variants (Patchstack). Fixed: 1.26.13 and 2.26.13.
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.