WordPress has announced it’s launching an automated security review for every release of a plugin before it’s distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved.
« New plugins are reviewed before they enter the directory, but updates ship continuously after that, » David Perez, WordPress Official Plugin