criticalsuspicious.exposed_secret_literalLocationscripts/auth.mjs:114FindingFile appears to expose a hardcoded API secret or token.