Supply chain attach on cargo crates.io? is your publish credential safe?

just read this news, I wonder how bad is it? are you affected by this? the crates seems to have large volume of downloads?