This repository indexes third-party plugins but does not execute them and does not certify their safety.
Report a problem with the directory itself through a private GitHub security advisory. Report a plugin vulnerability to that plugin's maintainer first. If a listed plugin is malicious, compromised, or materially misleading, also report it here so the entry can be removed.
Never include credentials, private repository contents, or exploit details in a public issue.