I got this email from my host today:
Over the last couple of weeks there has been a widespread WordPress
exploit that seems to have infected all versions of WordPress except for
the most recent release (2.5.1) and has started to hit accounts hosted on our servers.
You can read more about the exploit here:
http://wordpress.org/support/topic/168964?replies=30