YoVille will NEVER ask for your password, so please be wary of malicious emails and/or forum posts that request your password, including via web links.
No, there have been releases, but nothing "short time." They did accidentally remove the Hulk and Bandana this morning, but they've already been put back.