Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging.
found npm access token: npm_Ab3kZy0X9QpLmN4tUvW7aB... [npm]
src/test/fixtures/secrets/secret2.ts#1:19-1:59
In case of false positives, you can allow specific types of secrets with --allow-package-secrets npm or use --allow-package-all-secrets to skip this check entirely (not recommended).