So, on Monday I discovered that last week’s problem had recurred, even more virulently. Unfortunately, in fixing the site we’ve had to abandon the comments on the last two posts, for which I’m very sorry. I do have copies of everyone’s comments, via email notification, and can repost them (with attribution) if necessary.
For the next little while I’ll be running with a default theme (*shudder*) and minimal plugins, in an attempt to eliminate possible vectors for the problem, so if you’re visiting rather than reading via RSS and the blog looks, uh, barebones? That’s why.
Edit @ 1835h: In addition, unfortunately I’ve had to totally disable comments as a temporary measure, as it seems the malicious code is being inserted via WP’s comments feature. Obviously, this sucks, and it’ll be fixed as soon as possible. Old comments are still viewable, though.
Edit @ 0506h July 5th: Comments are back on again, hooray. (Although comments that were lost remain lost.)
This is also why I haven’t been posting for the last week; no point making posts that I’d only have to repost anyway. Hopefully that will no longer be an issue!