In a supply chain attack, attackers install backdoors through the WordPress plugins OptinMonster, TrustPulse, and PushEngage.
Agreement hasn’t been made public, and officials have sometimes offered contradictory interpretations of what is in it ...