BungeeCord is a sophisticated proxy and API designed mainly to teleport players between multiple Minecraft servers. It is the latest incarnation of similar software written by the author from 2011-present.
BungeeCord is maintained by SpigotMC and has its own discussion thread with plenty of helpful information and links.
As your Minecraft servers have to run without authentication (online-mode=false) for BungeeCord to work, this poses a new security risk. Users may connect to your servers directly, under any username they wish to use. The kick "If you wish to use IP forwarding, please enable it in your BungeeCord config as well!" does not protect your Spigot servers.
To combat this, you need to restrict access to these servers for example with a firewall (please see firewall guide).
Source code is currently available on GitHub.
Precompiled binaries are available for end users on Jenkins.
(c) 2012-2022 SpigotMC Pty. Ltd.