Comment by Jotalea

the only conclusion i get from this article is that using WordPress is unsafe; just like using Node, Python, Arch Linux, and any platform whose package manager allows community sourced packages.