[17:04:51] <Krinkle>	 https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/
[17:05:19] <Krinkle>	 Details the method and details quite well.
[21:52:28] <A_smart_kitten>	 please could i get an opinion / sense-check on something from someone more experienced than me?
[21:52:45] <A_smart_kitten>	 i came across https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1261608, and I guess.... it just feels like Core shouldn't be aware of the TestKitchen extension
[21:53:17] <A_smart_kitten>	 but I don't feel like I know enough to be certain of anything¯\_(ツ)_/¯