Lemmy instances are being compromised by a js injection

lemmy.world and lemmy.blahaj.zone are down from what seems like a JavaScript injection attack