Please use GitHub private vulnerability reporting for the repository. For direct security reports, email:

apps@hellomalek.com

Do not disclose a potential vulnerability in a public issue before it has been reviewed.