1
Malware found in official gravityforms plugin indicating supply chain breach
Update 7-12-2025 06:00 UTC: We have observed some activity in regard to one of the backdoors that involves a gf_api_token parameter. The IP address 193.160.101.
Keep your WordPress sites and JavaScript apps safe from vulnerable plugins, themes & npm packages. Protect sites with virtual patching.
Visit patchstack.com → RSS feedOn Hacker News Jul 2025 – Jul 2025
Update 7-12-2025 06:00 UTC: We have observed some activity in regard to one of the backdoors that involves a gf_api_token parameter. The IP address 193.160.101.