I found some api keys in js files ,huge leak of token addresses and huge amount of js files are not forbidden