Apparently we still aren’t in the clear, the site is again redirecting to that pic with the disgusting caption.

This happens only when going to the the main feed, meaning the malicious JavaScript is in the main sidebar.

EDIT: yeah it’s the sidebar that is not properly escaping HTML, the whole code needs a security audit: