Hello, i received this email from google:
Hello Google Play Developer,
We detected that your app(s) listed at the end of this email are potentially leaking credentials used to make network requests (HTTP and FTP).
Please check for cases where you use url-encoded basic access authentication, for example a URL such ashttps://firstname.lastname@example.org/. We recommend that you immediately change the credentials and redesign your app to avoid including them.
- Sign in to your Developer Console and submit the updated version of your app.
- Check back after five hours - we’ll show a warning message if the app hasn’t been updated correctly.
Exposed developer credentials can allow an attacker to compromise your systems which puts user data at risk. For other technical questions about the vulnerability, you can post to Stack Overflow and use the tag “android-security.”
We’re here to help
If you feel we have sent this warning in error, you can contact our developer support team.
The Google Play Team
Affected app(s) and version(s) are listed below. If you have more than 20 affected apps in your account, please check the Developer Console for a full list.
Help out plz