Just rebuilt one of my Discourse forums and when I load it in the browser, the following message shows up in a popup: You’ve been hacked by a plugin! by w3shi(Hackerone)-S.Lakshmi Vignesh(RCE-POC) Holy… What is going on? One of the plugins I use was compromised?

Indeed, @RGJ is now back in control of the github organization, so we’ve removed the temporary error message.

Third-party plugin repository hijacked

schleifer (Andrew Schleifer) July 22, 2025, 2:40pm 14

Welcome to the community and thank you for fixing everything up.

9 Likes

Topic		Replies	Views
Installation Error when rebuilding with Discourse Official Plugins (Discourse v2.0.3) Installation solved	8	2568	August 16, 2018
Forum not working after update – what’s missing? Installation	36	259	September 4, 2025
Check plugin or theme validity Support	16	1357	October 25, 2023
Deprecated plugins after update? Installation	3	318	November 23, 2023
Github integration for Discourse hosted Support	1	405	September 8, 2021