diff --git a/plugins/protocolbuffers/js/v4.0.3/.dockerignore b/plugins/protocolbuffers/js/v4.0.3/.dockerignore
new file mode 100644
index 000000000..5d0f124ff
--- /dev/null
+++ b/plugins/protocolbuffers/js/v4.0.3/.dockerignore
@@ -0,0 +1,2 @@
+*
+!Dockerfile
diff --git a/plugins/protocolbuffers/js/v4.0.3/Dockerfile b/plugins/protocolbuffers/js/v4.0.3/Dockerfile
new file mode 100644
index 000000000..bfb1a9560
--- /dev/null
+++ b/plugins/protocolbuffers/js/v4.0.3/Dockerfile
@@ -0,0 +1,21 @@
+# syntax=docker/dockerfile:1.26
+FROM debian:trixie-20260824@sha256:f324c7ff54321e8d9c588493a20244965938ce0aa50bbd1022d38010e9ffc4b1 AS build
+
+ARG TARGETARCH
+
+RUN apt-get update \
+ && apt-get install -y curl
+RUN arch=${TARGETARCH}; \
+    if [ "${arch}" = "amd64" ]; then arch="x86_64"; elif [ "${arch}" = "arm64" ]; then arch="aarch_64"; fi; \
+    curl -fsSL -o /tmp/protobuf-javascript.tar.gz https://github.com/protocolbuffers/protobuf-javascript/releases/download/v4.0.3/protobuf-javascript-4.0.3-linux-${arch}.tar.gz \
+ && cd /tmp \
+ && tar zxf protobuf-javascript.tar.gz bin/protoc-gen-js \
+ && rm -f protobuf-javascript.tar.gz
+
+FROM gcr.io/distroless/cc-debian13:latest@sha256:4594d59540d1948417f6ca2829ddd9294493a7c68b7528f4dd459de7f203a750 AS base
+
+FROM scratch
+COPY --from=base --link / /
+COPY --from=build --link --chmod=0755 /tmp/bin/protoc-gen-js .
+USER nobody
+ENTRYPOINT ["/protoc-gen-js"]
diff --git a/plugins/protocolbuffers/js/v4.0.3/buf.plugin.yaml b/plugins/protocolbuffers/js/v4.0.3/buf.plugin.yaml
new file mode 100644
index 000000000..855b30fe6
--- /dev/null
+++ b/plugins/protocolbuffers/js/v4.0.3/buf.plugin.yaml
@@ -0,0 +1,18 @@
+version: v1
+name: buf.build/protocolbuffers/js
+plugin_version: v4.0.3
+source_url: https://github.com/protocolbuffers/protobuf-javascript
+description: Base types for JavaScript. Generates message and enum types.
+output_languages:
+  - javascript
+registry:
+  npm:
+    deps:
+      - package: 'google-protobuf'
+        version: ^4.0.3
+    import_style: commonjs
+  opts:
+    - import_style=commonjs
+    - binary
+spdx_license_id: BSD-3-Clause
+license_url: https://github.com/protocolbuffers/protobuf-javascript/blob/v4.0.3/LICENSE.md
diff --git a/tests/testdata/buf.build/protocolbuffers/js/v4.0.3/eliza/plugin.sum b/tests/testdata/buf.build/protocolbuffers/js/v4.0.3/eliza/plugin.sum
new file mode 100644
index 000000000..7d0ca0e72
--- /dev/null
+++ b/tests/testdata/buf.build/protocolbuffers/js/v4.0.3/eliza/plugin.sum
@@ -0,0 +1 @@
+h1:wQIMUPRiJej5NUylVzlJbZQuoWOEyQAVFqDMcAL1rqw=
diff --git a/tests/testdata/buf.build/protocolbuffers/js/v4.0.3/petapis/plugin.sum b/tests/testdata/buf.build/protocolbuffers/js/v4.0.3/petapis/plugin.sum
new file mode 100644
index 000000000..0aafe37ea
--- /dev/null
+++ b/tests/testdata/buf.build/protocolbuffers/js/v4.0.3/petapis/plugin.sum
@@ -0,0 +1 @@
+h1:RhtraNu9zMktIcNrBU+024jXoSx9/BsG/oK3VnPLgSc=