I noticed that the repository currently includes hard-coded credentials that pose a serious security risk. The SMS-Activate API key is committed directly in app.py. A SOCKS5 proxy string with username and password is also hard-coded.