This repository is a dataset and tooling project. It intentionally contains no exploit code, payloads, or operational offensive detail, and contributions containing them are rejected (see CONTRIBUTING.md).
If you find a security issue in the tooling (scripts, CI) or a way this dataset could be abused:
- Use GitHub's private vulnerability reporting on this repository, or
- Contact MLSecOpsHub via https://mlsecopshub.com.
Please do not open a public issue for security-sensitive reports. We aim to acknowledge reports within 7 days.
Factual errors, sourcing problems, or victim-naming concerns are handled as data corrections, not vulnerabilities — open a Data correction issue. If a record names your organization based on sourcing that does not meet our public-disclosure bar, say so in the issue (or use the private channel above) and we will review promptly.
Records describe incidents at attack-lifecycle level only. If you believe any record crosses into operational offensive guidance, report it via the channels above and it will be treated with the same priority as a vulnerability.