Just read the PHP source before installing it

WordPress Supply Chain Attack—93 Add-Ons Infected for Months
A popular maker of WordPress plugins and themes was hacked—93 of AccessPress’s offerings were modified to give the hackers “full access” to users’ sites ...