Researchers have found that one of the most popular source code repositories in the world is still housing thousands of publicly accessible user credentials.