Your WordPress installation has likely been compromised.
Contact your host and ask them to look for recent suspicious activity.
We had an issue like this a while ago, an account had been compromised which let the intruder inject code to our blogs. MojoHost were able to track it down and added extra security to prevent it from happening again.
Thank god for technical support
