This discussion atop Hackernews right now about how someone bought 30 WordPress plugins and planted a backdoor in all of them has me wondering, is there a plugin that blocks plugins from being automag...
@nprofile1q... I use such a plugin for the browser (it monitors the ownership changes of the other plugins), but I don't use WordPress, so I don't know. The browser plugin is called "Under New Management".