Just rebuilt one of my Discourse forums and when I load it in the browser, the following message shows up in a popup: You’ve been hacked by a plugin! by w3shi(Hackerone)-S.Lakshmi Vignesh(RCE-POC) Holy… What is going on? One of the plugins I use was compromised?

Indeed, @RGJ is now back in control of the github organization, so we’ve removed the temporary error message.

Third-party plugin repository hijacked

Lilly July 17, 2025, 9:04pm 4

just remove anything referring to discoursehosting

9 Likes

Topic		Replies	Views
Installation Error when rebuilding with Discourse Official Plugins (Discourse v2.0.3) Self-hosting solved	8	2602	August 16, 2018
Install plugins on a self-hosted site Self-Hosting how-to	49	258803	February 22, 2026
Forum not working after update – what’s missing? Self-hosting	36	423	September 4, 2025
Check plugin or theme validity Support	16	1401	October 25, 2023
Deprecated plugins after update? Self-hosting	3	333	November 23, 2023