In short, a nulled plugin is a Trojan horse. It looks like a $49 classifieds add-on, but it is actually a delivery mechanism for malware.
If you're concerned about a specific nulled plugin, consider reporting it to the developers of Osclass or the specific plugin you're concerned about. This can help in taking down malicious or unauthorized distributions. osclass plugin nulled