supply chain attack

The BdThemes compromise did not modify any plugin code, so updating would not have stopped it. The twenty minute check that would have.