Yep, reported and people are looking at it.

Either we had some injected code or someone deployed something they shouldn't have.