In the Plugin Manager, searches also search the full text of security advisories, so searching for "Credentials" returns a lot of plugins with an attached "Credentials stored in plain text" warning.

My expectation would be to find plugins related to credential storage.