This sucks much, especially if you reuse passwords. According [1] this was introduced "(March 12, according to Sysdig)", so it might be good idea to check logs for suspicious stuff in this range. IMHO whatever microsoft buy, they ruin it.
[1] https://www.theregister.com/2025/03/17/supply_chain_attack_github/ -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/sage-devel/CAGUWgD_eFPFZmTBq2y-5nX4ZNA7HF8i4ataZsaa%2BsyHj%3DY8Brw%40mail.gmail.com.