One of our FTP accounts got compromised and the fuckers added some shitty javascript to a bunch of our site files.
We've reset all our passwords on our FTP, making sure they are strong passwords, and I *think* I've got all the files that were compromised. I got everything with a time stamp around the attack, but if you run into anything else, let me know.
I don't know what the end result for systems are, but it wouldn't hurt to do a scan of your computer(s).