Security alert: Attack campaign involving stolen OAuth user tokens issued to tw

Looks like Heroku got hit by it: https://status.heroku.com/incidents/2413

https://news.ycombinator.com/item?id=31046791 got more traction.

A clearer title for this would be "Heroku and Travis CI GitHub OAuth apps compromised".