My laptop was compromised through the rust supply chain attack thing (blake3 dependency). I'm revoking everything. Github tokens and https://crates.io is done and nothing malicious has been released.
...
That's exactly what an attacker holding your nsec would say.