Wash, someone on your network has exposed it to sites that do such and there is an exploit somewhere. The funniest part was your description, I still cannot stop laughing..... :-)
I am using Pidgin IM, v2.5.8
I was actually on IM with someone I know, but how this came onto my screen still buffles me, as I believe they did not send it.