It is customary to use the HANG command so that the debugger can attach to the running process when debugging code.
However, it frequently occurs that this extra statement, which is there only for debugging purposes, is not removed before the code is commited.
Please check that this usage of HANG is legitimate; if this is the case, mark this issue as a false positive.
More generally, even if the use is legitimate, you may want to rethink the code so as to avoid using this command altogether.