Last December we saw a couple of malicious JavaScript strings being pasted into Web sites on compromised servers. The beginning of the scripts look like one of the following: /*GNU GPL*/ try{window.onload = function(){var ～ /*CODE1*/ try{window.onload = function(){var ～

The rest is here:
New Obfuscated Scripts in the Wild: /*LGPL*/