Automattic

Daniel Bachhuber

Josh Betz

Add custom JavaScript to your site from an editor in the WordPress admin.
Your code is stored and revisioned with a custom post type, so you can always go back to a previous working state.
If you’d like to check out the code and contribute, <a href="https://github.com/Automattic/Custom-Javascript-Editor" rel="nofollow ugc">join us on GitHub</a>. Pull requests are more than welcome!

Custom JavaScript Editor

Add custom JavaScript to your site from an editor in the WordPress admin

Ben Lobaugh (blobaugh)

builtBackwards

Scan all of your theme files for potentially malicious or unwanted code.
What TAC Does
TAC stands for Theme Authenticity Checker. TAC searches the source files of every installed theme for signs of malicious code. If such code is found, TAC displays the path to the theme file, the line number, and a small snippet of the suspect code. As of v1.3 TAC also searches for and displays static links.
Then what do you do? Just because the code is there doesn’t mean it’s not supposed to be or even qualifies as a threat, but most theme authors don’t include code outside of the WordPress scope and have no reason to obfuscate the code they make freely available to the web. We recommend contacting the theme author with the code that the script finds, as well as where you downloaded the theme. 
The real value of this plugin is that you can quickly determine where code cleanup is needed in order to safely enjoy your theme.
History
TAC got its start when we repeatedly found obfuscated malicious code in free WordPress themes available throughout the web. A quick way to scan a theme for undesirable code was needed, so we put together this plugin.
After Googling and exploring on our own we came upon the <a href="http://5thirtyone.com/archives/870" title="article by Derek" rel="nofollow ugc">article by Derek</a> from 5thiryOne regarding this very subject. The deal is that many 3rd party websites are providing free WordPress themes with encoded script slipped in – some even going as far as to claim that decoding the gibberish constitutes breaking copyright law. The encoded script may contain a variety of undesirable payloads, such as promoting third party sites or even hijack attempts.

Theme Authenticity Checker (TAC)

It works like a charm, but what I miss is a plugin checker. Please consider it.
Thanks,
Alberto.



Please add plugin support

Easy to use, but very helpful I'm using it on every new project as a freelance theme developer ! :)



Very helpful !

Scan all of your theme files for potentially malicious or unwanted code.

Custom JavaScript Editor vs Theme Authenticity Checker (TAC)