Attackers are hijacking popular wordpress plugins to deploy backdoors, though the scope and methods of the attacks are not entirely clear. Other reports suggest hackers are also targeting various software and platforms, including npm packages, github repositories, and workflow automation platforms, to spread malware and gain unauthorized access. The range of targets and techniques implies a broad and complex threat landscape.