Before you proceed further, you should delete your mail credentials on your code. I suggest you move it to the .env file, and change your current one, assuming you unintentionally put your real password.