I had read that a Firefox extension called "LJHook" was implicated in weird behaviour (random userpics when the user wasn't expecting that, for example).
A quick Google didn't turn up anything likely-looking on the first page, but what I found amusing was the message, "Did you mean: ljhooker?"