If you find a security problem in this plugin, please report it privately through GitHub: Security → Report a vulnerability on this repository. Please don't open a public issue for it.
New wp2shell indicators (hashes, file names, code patterns) aren't secret — share those as a normal issue or pull request, with a link to the source.