critical
suspicious.env_credential_access
- Location
- index.js:51
- Finding
- Environment variable access combined with network send.
- Evidence
baseUrl: readString(raw.baseUrl) ?? process.env.SPEACHES_BASE_URL ?? DEFAULT_BASE_URL,
AdvisoryAudited by Static analysis on May 12, 2026.
Detected: suspicious.env_credential_access
baseUrl: readString(raw.baseUrl) ?? process.env.SPEACHES_BASE_URL ?? DEFAULT_BASE_URL,