Spam on webform attachments
Google sent an automated warning that civicrm.org was having spam content. (notification forwarded by @josh)
Example URL:
Seems to be via this form:
https://civicrm.org/civicon/st-louis-2017/submit-session
(according to the server logs, since it's still being spam lived)
$ ls -la -- *.html | wc -l
21924