So Smashing Magazine got hacked yesterday[1] and I was quite surprised by this because they've moved off WordPress 3 years ago and have been promoting JAMstack ever since for its performance and security.
I doubt they will be doing a post-mortem on this, but where would the entry point be? A weak GitHub account without two-factor authentication or something else?