It was a false positive. They were looking at incoming messages sent TO NetSuite and I missed it at first. Time for the weekend.