Your NEXT_PUBLIC secret is already in the browser bundle
A developer has highlighted a critical security flaw in Next.js applications where developers inadvertently expose server-side secrets by prefixing environment variables with NEXT_PUBLIC_. The tool Ke…