When updating users, if no password is provided the existing one is reset. This seems wrong to me, as you probably won't know the password for users you're trying to update.
To fix this, could you change line 136 to:
if ( empty( $userdata['user_pass'] ) && ! $update )
please?
Thanks!