criticalsuspicious.exposed_secret_literalLocationscripts/request-reviews.js:200FindingFile appears to expose a hardcoded API secret or token.