Report security issues privately through GitHub. Do not open a public issue.
- A problem in a plugin: open the Security tab of that plugin's repository (listed in
README.md) and choose Report a vulnerability. - A problem in this marketplace list: open this repository's Security tab and choose Report a vulnerability.
Each plugin's README says what it runs on your machine, what it reads and changes, and which network requests it makes. Read it before you install the plugin.