A programmer found a hole in Twitter's TweetDeck app which is used on iPhones, Android devices and by the Chrome browser. He alerted Twitter and posted about it on line. Before Twitter could fix it, hackers exploited the hole to inject javascript code into tweets and a self-replicating worm that spreads itself by creating more infected tweets.
Twitter's first attempt to patch the hole failed so they had to do a second patch. Image may be NSFW.
Clik here to view.
TweetDeck users are advised to log out of the app and then log in again to get the latest patch. TweetDeck users are also being advised to change their Twitter account passwords too.