Truffle Security found 543,699 still-valid credentials across more than 224 million public GitHub repositories, including some exposed for over 16 years.