A massive unsecured database exposed 149 million logins, raising concerns over infostealer malware and credential theft.