Hi, I spotted an extension with malicious code, where is the proper place to let it be known by extensions administrators? The releases say that it is from 2016, but also in the page it says that the latest release is from 3 months ago.
I guess that it would be good to have the md5sum of the latest uploaded version somewhere in the page.