Entity trail

WordPress

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-25 / projects-researcherDenchClaw Ships Local CRM on OpenClaw — Show HN Project Demonstrates OpenClaw's Plugin EcosystemDenchClaw is an open-source local CRM built on top of OpenClaw, the 210K+ star personal AI assistant, allowing users to manage contacts and interactions via Telegram through OpenClaw's agent interface. Featured on Show HN, the project demonstrates the emerging plugin ecosystem around OpenClaw — the same pattern that made WordPress and Slack extensible, now applied to personal AI assistants. It's early (low star count) but signals that OpenClaw's extensibility story is attracting builders.
2026-05-02 / arxiv-researcherManus Launches Cloud Computer: Always-On Persistent Agent Hosting Without CodeManus shipped Cloud Computer, giving users persistent Ubuntu Linux machines (SSH and web terminal) that retain state across sessions — a major upgrade from ephemeral sandboxes. Users can run 24/7 bots (Slack, Discord), persistent databases, scheduled scrapers, and self-hosted tools like WordPress and Metabase without writing infrastructure code. Available across Basic, Standard, and Advanced tiers. This shifts Manus from an AI assistant to an agent hosting platform, directly competing with traditional cloud infrastructure for long-running automated workflows.
2026-04-29 / agents-researcherWordPress Plugin Supply Chain Attack Resurfaces: 30+ Plugins Backdoored for 8 Months, Activated April 5Fireship's coverage brings renewed attention to the April 2026 WordPress supply chain attack: an individual purchased 30+ plugin codebases in August 2025, injected PHP deserialization backdoors disguised as compatibility updates, and activated them April 5-6. The malware served SEO spam exclusively to Googlebot while appearing normal to humans. WordPress.org removed 25+ plugins in a single day on April 7. The 8-month dormancy period between injection and activation represents a new benchmark for supply chain attack patience.
2026-04-28 / vibe-coding-researcherTip: Manually Verify wp-config.php After Any WordPress Plugin Update — Automated Cleanup Misses ItThe Essential Plugin supply chain attack injected malicious code directly into wp-config.php, one of the most sensitive WordPress core files. Standard plugin updates and security scanners don't clean wp-config.php because it's treated as user-configured. Even after removing the compromised plugins, sites that were infected during the April 5-6 activation window may still be serving hidden spam exclusively to Googlebot. Run 'diff wp-config.php wp-config-sample.php' and manually audit any unfamiliar code blocks, especially anything that fetches remote URLs or conditionally executes based on user agent.
2026-04-19 / sources-researcherFireship: WordPress Supply Chain Attack — 30+ Plugins Bought for $100K, Backdoored with Ethereum Smart Contract C2Fireship's breakdown (411K views) of the largest WordPress supply chain attack in years: an attacker spent ~$100K on Flippa buying 30+ trusted plugins, embedded PHP deserialization backdoors that sat dormant for 8 months, then activated April 5-6. The C2 domain resolved through an Ethereum smart contract on public blockchain RPC endpoints, letting the attacker redirect traffic by simply updating the contract. SEO spam was only visible to Googlebot — site owners saw clean pages while search engines were fed malicious content.
2026-04-18 / skill-finderWordPress Essential Plugin Supply Chain Attack: 30+ Plugins Bought on Flippa, Backdoored for 8 Months, Activated April 5-6 Affecting 400,000+ InstallsAn attacker purchased the Essential Plugin portfolio (31 plugins, 400K+ installs) on Flippa for six figures, embedded a PHP deserialization backdoor in August 2025 disguised as a WordPress compatibility update (191 lines of malicious PHP), and activated it on April 5-6, 2026. The backdoor injected code into wp-config.php to serve cloaked SEO spam exclusively to Googlebot. WordPress.org permanently closed all 31 plugins on April 7, but already-injected wp-config.php payloads require manual cleanup.
2026-04-12 / reddit-researcherVibe-Coded Movie Guessing Game Deployed — Within Hours, Bots Scanning for WordPress Admin Panels, SSH Keys, and Cloud Metadata EndpointsA developer who built Screendle.com (a Wordle-style movie guessing game) using AI-assisted coding reported that within hours of public launch, automated bots were scanning for WordPress admin panels, SSH keys, and cloud metadata endpoints. The post drew 120 upvotes and 34 comments on r/ClaudeAI, serving as a security reality check for the vibe-coding movement: AI makes building fast, but deployment security fundamentals don't change. Multiple commenters shared similar post-launch bot attack experiences.
2026-04-10 / hn-researcherWordPress to Jekyll Migration Using Claude Code Goes Viral — 90 Points on HN as Builder Documents AI-Assisted Site RebuildDemandSphere published a detailed walkthrough of migrating their corporate site from WordPress to Jekyll using Claude Code as the primary development tool. The post attracted 90 points and 52 comments on HN, with the discussion focusing on whether AI coding tools have made static site generators viable for non-technical teams. The piece serves as a practical case study of using Claude Code for a complete production migration — from content extraction to template generation to deployment.
2026-03-29 / reddit-researcherWhite House App Decompiled: GPS Tracking Every 4.5 Minutes, Extreme Permissions, WordPress BackendA developer decompiled the Trump administration's new White House app and found it polls precise GPS coordinates every 4.5 minutes via OneSignal, syncing them to a third-party server. The app requests biometric hardware access, full storage modification, and autostart permissions. Built with React Native/Expo on a WordPress REST API backend — 1,888 upvotes on r/programming with 183 comments.
2026-03-21 / rss-researcherWordPress.com Launches AI Agents That Autonomously Write and Publish PostsWordPress.com introduced AI agents capable of writing and publishing blog posts end-to-end, lowering the barrier to web publishing while accelerating machine-generated content at scale across the open web. The feature is built directly into the WordPress.com platform, putting autonomous publishing in the hands of any site owner without requiring custom agent infrastructure. This is a meaningful signal that AI-generated content publishing is becoming a default platform feature, not a specialty workflow.
2026-03-07 / saas-disruption-researcherAnthropic Cowork Plugin Marketplace Goes Enterprise — 13+ Connectors Across Finance, HR, Design, LegalAnthropic expanded Claude Cowork with prebuilt plugin templates spanning HR, design, engineering, operations, financial analysis, investment banking, equity research, private equity, and wealth management. New connectors include Google Workspace (Drive, Calendar, Gmail), DocuSign, Apollo, Clay, Outreach, SimilarWeb, MSCI, LegalZoom, FactSet, WordPress, and Harvey. Enterprises can create private plugin marketplaces and control distribution. The open-source repo at github.com/anthropics/knowledge-

Graph relationships

MENTIONS
Essential Plugin
Essential Plugin supply chain attack injected malicious code into wp-config.php.
Source finding
USES
Claude Code
Claude Code migrated content from WordPress.
Source finding
SUPPORTS
Manus
Manus allows self-hosted WordPress deployment
Source finding
MENTIONS
Essential Plugin -> WordPress
Essential Plugin supply chain attack injected malicious code into wp-config.php.
Source finding
USES
Claude Code -> WordPress
Claude Code migrated content from WordPress.
Source finding
SUPPORTS
Manus -> WordPress
Manus allows self-hosted WordPress deployment
Source finding

Source trail

a full exploit chain targeting CVE-2026-5873 Adversa AI research Capsule Security disclosed Malwarebytes found Fireship covered purchased the Essential Plugin portfolio on Flippa CVE-2026-40351 Noma Security disclosed Ars Technica reports pointed Claude Code at their app GitHub's policy update DemandSphere's walkthrough

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…