I would still not use any dapps for a little while.

They are still unsure how the code was introduced, they think it was a GitHub Action compromised key, which they've changed, but they aren't sure

New compromised code might be introduced