No worries dude. So I am not really an expert on this (@guiltyparties who responded here in the comments is actually a part of Steem Cleaners and is taking a lead in dealing with response to this ongoing hacking episode) but from what I gather the compromised accounts are identified by voting activity. So if you look at your outgoing votes and/or downvotes for the past few weeks, you will likely find some that you did not cast yourself. The hacker set up a fake steem-engine website (the FAKE website is steemengine.com) and a ton of users (likely including yourself) entered their key into the website not realizing it was a fake. Most of the compromised accounts just gave their posting key authority to the hacker, which allows them to cast upvotes/downvotes but not actually steal your funds. The hacker has basically set up a bot net with the compromised accounts and has used them to upvote/downvote en masse.

Guiltyparties already said he took you off the blacklist so you shouldn't receive the @mack-bot flags anymore and you won't pop up on the blacklist for curation groups. BUT you still need to reset your account keys, or you will end up right back on the blacklist. Use your master/owner password to generate new active and posting keys, use the new posting key to log in to steemit or whatever front end you use and only use the active key for transfers and stuff that needs active key authority. Let me know if you need to get pointed to resources on how to regenerate your keys.

The main thing to keep in mind is that NO website (except steemit.com) is safe to enter your keys into directly. There are two safe tools that all legit steem websites use to avoid having you enter keys directly. These two safe tools are steemconnect and steemkeychain. If you find yourself at a website asking for your keys, it is a scam/phishing website. All legit Steem websites now use eitehr steemconnect or steemkeychain (or both).