RE: https://mstdn.social/@stux/117452666960522452

Friends. There seems to be a wave of spam right now, and it's looking like spammers taking over established accounts. This is a possible way they're gaining access, and even if it isn't, it's still a good idea to periodically check what you've got authorized. Projects come and go, and even active projects get taken over by hostiles.

Take a moment to check this setting on your masto account (and there are similar settings in other Fedi instance types) and make sure you don't have anything old.