It's not the server DDoSing itself (that would be a DoS anyway, even if it could clog its own network connection). The malicious code in InfiniteDispensers enabled the plugin to essentially use each server it was installed on to launch a DoS attack on something, thereby making an attack by them a DDoS.

Thanks! I was actually going to get NanoGuard Anticheat -_-

Here is the actual post


it has come to our attention that the plugins "NanoGuard Anticheat" and "InfiniteDispenser" have been distributing potentially malicious code hidden within their update process. We urge all server admins running these plugins or who have run these plugins to read this PSA carefully and follow the advice given immediately.

We strongly advise all server admins to cease using these plugins immediately:
NanoGuard Anticheat (Default file name: NanoGuardJAR.jar or similar)
InfiniteDispenser (Default file name: InfiniteDispenser-3.2.jar or similar)
As a general precaution, we strongly recommend that all server admins perform a full examination of their server, keeping an eye out for unknown plugins or suspicious behaviour - as is proper on a periodic basis. We also would like to remind server admins to avoid running anything with root or admin privileges without taking the proper precautions to safeguard against the security risks it poses.

Other than the DDoS part, you're correct.

Thanks for warning us server owners