OptinMonster supply chain attack hits 1.2 million sites

Reported 14 Jun 2026 by otx · Severity: medium

An active supply-chain attack targeted over 1.2 million WordPress sites using OptinMonster, TrustPulse, and PushEngage plugins operated by Awesome Motive. Attackers injected malicious JavaScript into legitimate files served through Awesome Motive's CDN endpoints. The malware acti