Twitter XSS vulnerability - had fake tweet posted from my account

I just had a fake tweet posted from my account with a link to cari-weightloss.net. Searching Twitter shows that tons of people are suddenly posting links to that site too. I've never given out my Twitter password to any other site and it is quite strong as well. Any idea as to how this is happening? Another Twitter 0-day?