User blog comment:TechKon/Problem/@comment-2033667-20150811073206/@comment-2033667-20150811102758

No such virus exists right now to my knowledge, but it is possible to create as long as wiki-wide user scripts are enabled.

Wikia and its userbase have been generally pretty terrible with JavaScript security. I reported that a large number of wikis were directly imported from a script on dev.wikia.com that anyone could edit. A random IP could have swept in and caused damage to tons of wikis. They fixed the issue for that particular script, but I'm certain there are many other wikis using other, unprotected scripts. The user JavaScript situation is just astoundingly incompetent on Wikia.