Return `400` if a broken plugin package is uploaded from HTTP API. Also cleanup if plugin is not accepted.