criticalsuspicious.exposed_secret_literalLocationscripts/publish-node.mjs:106FindingFile appears to expose a hardcoded API secret or token.