Report a vulnerability in passioncode.ai (the site, its Worker or its download redirects) privately to contact@passioncode.ai, never in a public issue. A vulnerability in one of the tools the site describes goes to the same address, or to the private reporting channel named in that tool's own repository.