Let& #39;s say I found a serious exploit in a Minecraft mod (e.g. acquiring op on a server or even entering commands into another player& #39;s windows shell) and disclosed it to the mod author.
How long should I wait for a response/fix, before reporting the mod as malware to Curseforge?

What are the opinions from the modding or infosec community on this?
@ohaiiChun @Snubs @DanTwoHundred @Direwolf20