Leaked Resend API key — modern sender, same risk

Resend is the transactional-email service of choice for many Next.js apps. A leaked Resend key lets the attacker send email from your verified domain.