Do not use PenguinMod-LegacyBackendApi anymore once this is completed. This version uses less resources & avoids Data URLs.
Yes code is really messy, a newer API is still in development that should have each endpoint in it's own small file instead of one large file.
uhh...
Please report any security vulnerabilities using GitHub's security tab on the repository, or join the PenguinMod discord on the website and DM a developer.