Molly, a Signal fork, has gone three months without updates and is reportedly vulnerable to attacks. Users relying on it should be aware of the security risk and consider alternatives until patches are released.