How to denounce a Plugin that setup malicious code in Wp-config?

Hi! I was wondering if any one knows how could I denounce/delete or at least make aware the WordPress community about a Plugin: (Bot Tracker) that setups, after installation, a malicious code in wp-config.php

I have a terrible problem using it, I passed a few days trying to detect where the Plugin added a malicious code that redirected my website, via Search Engines, to Spam and Malware Websites.

Now that I detected the problem, I would like to at least request WordPress to delete this Plugin from the Extend archives, or well, if there’s any specific forum to put the Plugin as Blacklisted, I think this could be useful for the WordPress community.

Thanks for your time!