One of my clients was hacked. The code shows up in the <?php get_footer(); ?> command. I reloaded WordPress 2.8.4, but that didn’t fix the issue. I changed the <?php get_footer(); ?> to <?php include(TEMPLATEPATH.”/footer.php”);?> to remove the sign of the attack until I can find and remove it. Hope that helps somebody.