The quickest way to reach Varalys is through the relevant project on GitHub.
Open an issue on the project you are using, or start from the Varalys organization page.
Find the affected repository, then use its security policy or advisory flow.