Three plugins were compromised through author accounts, which we caught pretty quickly. New versions were quickly pushed out. We're still investigating what happened, and reset passwords in an abundance of caution.