When you start dropping 0 days, you've crossed that line from "White hat security researcher" to "black hat" I don't effing care what your motivations are.
Also, as a dev or site owner/operator, supply chain attacks like this are rife. Always carefully vet your plugins.
@White_Rabbit - /sigh
I'd love to be able to disagree.
@0x56
I know you would, and I am really doing no one favors by pointing out the obvious. I guess this is my way to vent some frustration -- it really didn't help, at all.
This crap like kills my soul inside to see -- and that may sound romantic or exaggeratory in its presentation -- but I don't know how else to illustrate what a violation of ethics does to me when people rely on you and trust you.