The scam that shipped its own confession

A fake pet courier still publishes its template vendor’s demonstration password in plain text on its admin page. We did not log in. Nobody should. Why the string being public is the whole exhibit.