Lemmy.world (and some others) were hacked (lemmy.world)

This is an XSS vulnerability that is being actively exploited in the wild. A (not-yet-merged) fix was submitted here: https://github.com/LemmyNet/lemmy-ui/pull/1897