Just posted by EvilSeph
over on the Bukkit forums:
EvilSeph said:
It has come to our attention that the plugins "NanoGuard Anticheat" and "InfiniteDispensers" have been distributing potentially malicious code hidden within their update process. We urge all server admins running these plugins or who have run these plugins to read this PSA carefully and follow the advice given immediately.
We strongly advise all server admins to cease using these plugins immediately:
- NanoGuard Anticheat (Default file name: NanoGuardJAR.jar or similar)
- InfiniteDispensers (Default file name: InfiniteDispenser-3.2.jar or similar)
As a general precaution, we strongly recommend that all server admins perform a full examination of their server, keeping an eye out for unknown plugins or suspicious behaviour - as is proper on a periodic basis.
In accordance with our community policies regarding malicious code, these projects and their files have been completely removed from our sites and the individuals associated have been banned. While we do not - and cannot - guarantee we'll catch everything, our approval process is an ever evolving aspect of our project and we believe that it is an integral piece in providing server admins with peace of mind when running their servers.
Thanks for your continued support and understanding in this matter,
EvilSeph
- on behalf of the Bukkit Project
Just notating this here even though we don't provide or officially support anything Bukkit as I know a section of the server admins around here do still use Bukkit-based products. If you're running either of these plugins you may wish to check into this/deal with it.
Thanks.
