GoKawiilTruffle Security finds 543,000 live credentials still exposed in public GitHub repos
Truffle Security scanned 224 million GitHub repositories and 58 billion files, finding 543,699 unique valid credentials repeated across more than 1.1 million files and forks. The median exposure time was 784 days, with 10% of credentials older than 6.3 years and the oldest dating to 2009. The figure is more than double the 221,303 working credentials the firm previously found scanning Hugging Face.