We recently experienced a directed attack on SourceForge infrastructure and so we are resetting all passwords in the sf.net database – just in case.
Our investigation uncovered evidence of password sniffing attempts. We have no evidence to suggest that your password has been compromised. But, what we definitely don't want is to find out in two months that passwords were compromised and we didn't take action.