Some reports that this was related to compromised OAuth tokens. How would someone know and what is the source of the compromise? A third party app that all of t

Some reports that this was related to compromised OAuth tokens. How would someone know and what is the source of the compromise? A third party app that all of these accounts use?