This is another reason why you should never use the same password on multiple sites, just in case someone who has this plugin installed tries using your password on your email account, etc.