Microsoft says these 119 malicious extensions were downloaded a total of 2.6 million times since 2021.
.php cgi-bin images admin includes search .html cache login modules templates plugins wp-admin themes js index xmlrpc wp-includes media wp-content css language tmp scripts register misc install ...