Oops. Looks like some jackass managed to avoid the add-on exploit scanning on the RTB Downloads System and inserted some code into an add-on he submitted to get admin on other people's servers.
I've barred him from RTB and will be reworking the scanning to catch these kinds of things more effectively.