Just rebuilt one of my Discourse forums and when I load it in the browser, the following message shows up in a popup: You’ve been hacked by a plugin! by w3shi(Hackerone)-S.Lakshmi Vignesh(RCE-POC) Holy… What is going on? One of the plugins I use was compromised?

Third-party plugin repository hijacked

schleifer (Andrew Schleifer) July 22, 2025, 2:40pm 14

Welcome to the community and thank you for fixing everything up.

8 Likes