• 1.7.0 has a security issue that might compromise your credentials when publishing versions with build metadata. Make sure you update to at least 1.7.1 where the issue was fixed.

In order to report vulnerability, create an issue using Bug template.