PSA: Go change your steam password ASAP. Reset 2FA recovery Codes, if possible.
A story is currently developing that indicates up to 70% of all Steam accounts have been compromised in a supply chain attack on a third-party vendor.
EDIT: Muting this thread now. The story continues to develop, but I still urge caution.