[greatgib]

If you used this package, you would still have been victim of this despite your setup. All your password reset or anything sent by your app BCC to the bad guy.