This Premium WordPress plugin and theme have been compromised – here's how to check your website hasn't been infected
BuddyBoss had its update server compromised and used to push a poisoned update.

Source: TechRadar
BuddyBoss had its update server compromised and used to push a poisoned update.