Lemmy instances are being compromised by a js injection

Sorry for multiple posts, I couldn't tell if the sh .itjust. works post of mine went through and thought they were down too (also commenting here from kbin because i wanna not add more links to/from lemmy in case it could help this spread)