UPDATE 3:30PM
Google has indicated that they have "resolved" the issue. The web address that hosted the malicious application has been disabled.
https://www.google.com/appsstatus#hl=en&v=issue&sid=4&iid=c708d68b1884a629816e361895c125a5
ITS is continuing work to identify affected manhattan.edu users and remove the malicious application from the users' "Authorized Apps". Affected accounts may be temporarily suspended during these remediation steps.