As much as I usually bitch about people not upgrading their WordPress installs and then getting hacked, guess what I did? I must have left this one alone for AGES and, lo and behold, I find that everything in here is infected with malicious scripts.
Hardcore cleaning time!