I have seen a couple of webapps that say something along the lines:
"Use your twitter account-> User ___ password __"
And then they take you to some other page.
After all this phishing warnings and all, why should I trust in one of those apps?
What sites should do is use twitters oAuth to sign in, it will redirect you to twitter where you will be asked if want to share details (never your password). External sites will soon no longer be able to sign users into twitter using a username and password so behaviour like this will soon be going the way of the dodo.
To see it in action, I have built a site for the stack apps api that uses twitter oAuth called stack of twits.
A site that wants to let you use your personal credentials should have an OpenID integration like webapps.stackexchange.com (or the other family members).
Asking you to enter your credentials, even if without evil intent, is inviting trouble.
Always prefer OAuth logins - these direct you to Twitter to login and authorise the site (much like Facebook connect). But it can sometimes be difficult to be absolutely sure that it is Twitter you're sending the password to - especially if the site opens the OAuth page in an iFrame or similar.
Also - even if the site is using OAuth it can still be up to no good.
So you'll have to make a judgement call on whether you trust the site.
Update: An example of OAuth sites that can be up to no good: Twibbon does some bad stuff (that they put in their smallprint).