criticalsuspicious.exposed_secret_literalLocationextension/dist/index.js:18FindingFile appears to expose a hardcoded API secret or token.