🔴 GitHub is full of active passwords: 543,699 credentials found

Truffle Security researchers calculated that 543,699 unique and still-active credentials have been published in public repositories on GitHub. Some of these secrets have been accessible for years: the average lifetime of such leaks is 784 days, while the oldest secret (still active) dates back to 2009.

The experts' study is based on a dataset designed for training large language models. This dataset was collected through a GitHub crawl, which ended on August 7, 2025. To conduct the analysis, the company examined approximately 224 million repositories and over 58 billion files.