Please report security issues privately through GitHub Security Advisories:

https://github.com/JaydenYoonZK/wp-plugin-checkup/security/advisories/new

This project is a static browser tool. It does not ask for WordPress logins, site URLs, or admin access. If you find a way for pasted plugin data to leave the page except for the documented WordPress.org API lookups, please report it privately.