Hacker News Reader

If you (or anyone) ever sees anything like this please email marketplace@magento.com or me at ben@magento.com.

Probably you encountered this in the days of Magento Connect. Our new app store (Marketplace) actually hosts the code and has static code tests for many things, including OWASP items.

View on HN

Thank you for the contact details, I'll send you the details of the security issues later this week.

This extension was purchased through Magento Connect just a few months ago. I'm glad to hear the situation is improving now.

Reply on news.ycombinator.com