On the current spam wave some of you experience on the Fediverse: I think @stux is right by suspecting it might be one or more 3rd party apps that got hacked or are leaking authentication tokens.

So. Go to your account settings and check the "Authorized Apps" part. Revoke the permissions of apps you don't use anymore. Consider it housekeeping and make it a regular Todo :)