This could be as simple as a piece of software they all tried being malicious. Even prominent plugin authors are vulnerable to malware pretending to be a shiny

This could be as simple as a piece of software they all tried being malicious. Even prominent plugin authors are vulnerable to malware pretending to be a shiny new toy.