If the plugin has a site, report it here.

Forum posts do nothing because at best it does nothing, and at worst it informs degenerates that there's a new thing for them to abuse.