#0 - Dec. 3, 2007, 1:48 a.m.
Blizzard Post
Please be aware that key loggers have been added to AddOn packages on several different AddOn sites.

In general we recommend not downloading any AddOn packages that have executables or batch files that run installers or data collectors, as they may have been tampered with.

Cairenn has posted an excellent description of the problem and how to resolve it if you've already installed an infected package:
http://forums.worldofwarcraft.com/thread.html?topicId=3168484081&sid=1

In addition, WoWI has taken the step of quarantining any package that has an executable installer. This was a bold move to ensure the safety of the community and is greatly appreciated.