"access tokens compromised by this attack should no longer be useable", but tokens compromised by other compromised packages published during the intervening pe

"access tokens compromised by this attack should no longer be useable", but tokens compromised by other compromised packages published during the intervening period will still compromise you.