Just made a purchase and used paypal to fund it. I have 2-factor authentication turned on so I got a text and had to enter my code. No big whoop till 10 minutes later when I get 3 more texts with new codes all back to back. That means they already have my password. Paypal wasn't a part of heartbleed so I'm trying to figure what the fuck? So - what the fuck?