Is this spam? Is my account compromised?

If there is a purple Y! logo next to it, it could be valid. To be safe, don't click links within it. If you never made any request to obtain your password, then, when you change your password, look for any unfamiliar email address added as an alternate email contact address. If there is one, remove it. Then change your password again.