Malware injected into legitimate JavaScript code on legitimate websites

http://nakedsecurity.sophos.com/2013/02/13/malware-javascript/