Just rebuilt one of my Discourse forums and when I load it in the browser, the following message shows up in a popup: You’ve been hacked by a plugin! by w3shi(Hackerone)-S.Lakshmi Vignesh(RCE-POC) Holy… What is going on? One of the plugins I use was compromised?

Indeed, @RGJ is now back in control of the github organization, so we’ve removed the temporary error message.

Third-party plugin repository hijacked

schleifer (Andrew Schleifer) July 22, 2025, 2:40pm 14

Welcome to the community and thank you for fixing everything up.

9 Likes

Topic		Replies	Views
Installation Error when rebuilding with Discourse Official Plugins (Discourse v2.0.3) Self-hosting solved	8	2599	August 16, 2018
Install plugins on a self-hosted site Self-Hosting how-to	49	258605	February 22, 2026
Forum not working after update – what’s missing? Self-hosting	36	415	September 4, 2025
Check plugin or theme validity Support	16	1399	October 25, 2023
Deprecated plugins after update? Self-hosting	3	333	November 23, 2023