Report vulnerabilities or possible credential exposure through GitHub's private vulnerability reporting. Do not open a public issue.
See Security and data flow for permissions, network connections, local storage, data handling, cleanup, updates, and release verification.