The cause of the intrusion has been found and isolated. We have no indications that other systems including core distribution was accessed, so there is no immediate cause for concern there. Sites should be operational right now and everything should work fine right now.
PSA: If people downloaded RetroArch on Windows earlier today they should check their history for mediafire. Trusted downloads from Libretro always originate from http://buildbot.libretro.com and/or http://bot.libretro.com. We will never upload files to any third party file sharing site.
More to share on this later on.