Yep, seems to be compromised there:

http://sitecheck.sucuri.net/results/youthoughtwewouldntnotic...