Can you send a message to <guix-security@gnu.org>?

https://guix.gnu.org/en/security/