Researchers discovered several unprotected Apache Airflow instances exposing credentials for popular services.