I've just receive an e-mail in my Gmail saying
Google 2-Step Verification blocked a sign in attempt to your account.
It also states that
If it wasn’t you, then someone else knows your password, and you should secure your account now.
There is also some information of the attempt:
Windows Wednesday, May 16, 2018 5:50 PM (France Time) Paris, France Firefox
I had logged in in my Gmail account around that time through Tor Browser. Immediately, I checked the circuit I was using and there was a node from France, but it was a middle node.
Is it OK to get that alert? Is it possible the way Tor connects a user to his Google account triggers those kind of alerts? Should I be worried about a middle node turning rogue?