If you have ideas or suggestions for us or special needs, please drop us a line! Use of OpenSecrets APIs requires an API key (obtained upon registration) be passed with each request. Our expectation ...

A new malware campaign targeting WordPress sites employs a malicious plugin disguised as a security tool to trick users into ...

Backdoor plugin hijacks WordPress sites with admin access, stealth reinfection, and JS ad fraud—active since Jan 2025.