You guys were not in danger, I hope, of picking something up: it was a file on the installation on our server. We used the patch (available on WordPress) and all should be well. If you at any time have a password request involving something called Magic, we can tell you what to do.