Franklin Veaux has diagrammed a network of compromised sites–including the Boston Public Library’s blog–that are geared towards installing viruses. He notes that there has been a surge of attacks recently against compromised WordPress sites, so the lesson is to be sure that you keep your WordPress version up-to-date.
Veaux does link to some of these sites in his post, so don’t follow those links unless you really know what you’re doing.