Please use GitHub private vulnerability reporting on the affected public repository. Do not publish vulnerabilities, account details, license keys, credentials, tokens or private logs in a public issue.
Official KamalQuant downloads are linked from:
Verify release packages against their published SHA-256 checksums.