Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release channels and push backdoor code.

For maintainers of small JavaScript CLI/tooling repos who document GitHub Actions examples, this local CLI catches README/workflow drift before a contributor copies a stale release command. Instead of ...