When you start dropping 0 days, you've crossed that line from "White hat security researcher" to "black hat" I don't effing care what your motivations are.
Also, as a dev or site owner/operator, supply chain attacks like this are rife. Always carefully vet your plugins.
@White_Rabbit what type of "doxing" are we talking here? That term's original meaning has gotten pretty diluted. @0x56