Same issue here. I tried creating app-specific passwords to no avail and tried using a different developer account in the same org as well. We had a successful app build using xcrun altool --upload-app 9 days ago. Did something change in the past week?