Your API key is probably sitting in your JavaScript
Anything your browser downloads can be read by anyone. Here is how AI-built apps leak OpenAI, Stripe and Supabase keys, and how to fix it in ten minutes.
Blog
Security for people who build with AI, in plain words.