Update: this seems to be a distribution attack using @DistroKid - none of my accounts are compromised, but apparently scammers can use Distrokid to post fake songs to your artist profiles. Not a great system, folks!
PSA, a scammer seems to have somehow posted a fake "Resurgence" song to my artist profiles on Spotify, YouTube, etc. I'll work with those networks to have it removed. That is not my song, and I have no involvement with any tokens - it's a scam.