This repository hosts static HTML, CSS, JavaScript, and JSON on GitHub Pages. There is no server-side application code in this repo.
If you find a security issue (e.g. malicious script injection via PR, dependency compromise in CI):
- Email admin@multilogin-labs.github.io with steps to reproduce
- Do not open a public issue for exploitable details
- Allow up to 14 days for initial response
- Third-party checkout flows (Multilogin and other vendors)
- Social engineering against lab readers
- Findings that require physical access to a contributor machine
We appreciate responsible disclosure and will credit reporters in CHANGELOG.md when fixes land (unless you prefer anonymity).