Hackers Compromised ILSpy WordPress Domain to Deliver Malware

Hackers compromised the ILSpy WordPress domain on April 6, 2026, redirecting developers to a malicious site that prompted them to install a dangerous browser extension to deliver malware. The compromised site was later taken offline, but the incident highlights the ongoing threat of supply chain attacks targeting developers.

Edward Kiledjian @ekiledjian