Glossary: Modern Vulnerabilities, Malware and Physical Attacks

Hardcoded secret

Also written: hardcoded secrets

A password or key written directly into code, like the API_KEY in config.py. If that code is in a public repository, two weaknesses apply at once.