I have solved The Case of the Mysterious
Diet Pill Snake Oil Ad that appeared on my updates page. I was quite puzzled at first. I was pretty sure I hadn’t been hacked, because the ad only appeared on the updates pages (both current and archived ones) and it seemed to me that snake-oil-selling hackers would want to put it up on every page. But I figured it out and shall explain:
So I went back to each HTML document in the domain’s /updates folder and removed that bit of code. Problem solved. Let me know if I missed anything.
(I changed my domain login password, too. Why not?)