Just rebuilt one of my Discourse forums and when I load it in the browser, the following message shows up in a popup: You’ve been hacked by a plugin! by w3shi(Hackerone)-S.Lakshmi Vignesh(RCE-POC) Holy… What is going on? One of the plugins I use was compromised?

Third-party plugin repository hijacked

Lilly (Lillian Louis) July 17, 2025, 9:04pm 4

just remove anything referring to discoursehosting

9 Likes