Malicious plugins hosted in the WordPress Plugin repository.

https://blog.nintechnet.com/malicious-plugins-hosted-in-the-wordpress-plugin-repository/