it might've had something to do with the image or theme because every time i clicked on /qa/ when that thread was up this would appear
which is exactly what the code written does (it runs js on your browser)
it could in theory steal people's gempasses or even the admin credentials