Please do not open a public GitHub issue for security vulnerabilities.

Report vulnerabilities privately via GitHub's Security Advisories feature.

Include:

• A description of the vulnerability and its potential impact
• Steps to reproduce
• Any suggested fix (optional)

You will receive a response within 48 hours. If confirmed, a patch will be released as soon as possible and you will be credited in the release notes (unless you prefer otherwise).

This extension runs only on x.com and twitter.com. It does not collect, transmit, or store any user data — it only modifies the local DOM. Security issues related to unintended data collection or privilege escalation are in scope.