This came up in The Register today - the license for Oracle Virtual Box Extension Pack has changed to purely commercial from the past evaluation.
https://www.theregister.com/2025/07/30/licensing_change_oracle_virtualbox/ This means that users owe Oracle money by simply downloading the Extension Pack, similarly to their Java license. It is hard to say whether they will come after individual downloaders, but if they do come, individual or corporate they will have to pay whatever amount Oracle asks for. I personally, respect license terms, the future of OSS depends on that - So, my personal take is - if you do not want to pay for a product, don't take it. Not that we do not have great alternatives in Linux - QEMU/KVM with Virt-Manager, Gnome Boxes, etc., etc. - T