This repo demonstrates a hardcoded secret in a Node.js app.
node app.js
The secret is directly in the code. This is risky and not recommended.