GitHub notified some users that their Personal Access Tokens are compromised (twitter.com)

Both reports on twitter from the last ~1hr mention Travis CI

The first is linked in the headline, the other report is here: https://twitter.com/yaqwsx_cz/status/1600599797118996491

Travis changed the dashboard URL to be on a 'app.' subdomain a couple of days ago. I had to re-authorize the Travis-CI app on github as well. No warning about compromise though.

Few other reports:

https://twitter.com/rformer/status/1600620089308598272