I discovered a vulnarable extension. What to do?

Today I found vulnerability in a chrome plugin that allows attackers to create, with easy, phishing attacks and try other attempts.

I reported it to Google and to the makers, but in case no one reacts what do you think next step should be?

The basics is - in the plugin there is a API point of sending e-mails with the credentials in plaintext inside the plugin.

The attack three could be like this:

- an attacker could use it …

cybersecurity extension