Travis changed the dashboard URL to be on a 'app.' subdomain a couple of days ago. I had to re-authorize the Travis-CI app on github as well. No warning about compromise though.
Both reports on twitter from the last ~1hr mention Travis CI<p>The first is linked in the headline, the other report is here:
<a href="https://twitter.com/yaqwsx_cz/status/1600599797118996491" rel="nofollow">https://twitter.com/yaqwsx_cz/status/1600599797118996491</a>
Few other reports:<p><a href="https://twitter.com/rformer/status/1600620089308598272" rel="nofollow">https://twitter.com/rformer/status/1600620089308598272</a>