So, until you hear otherwise, it's probably best to hold off on any Google Docs usage for now. If you've clicked the link in the malicious email, you can revoke the attacker's access by visiting myaccount.google.com/permissions and deleting the "Google Docs" app — which is the one pretending to be legitimate.