Nice write-up on those Javascript FB worms by @HackAck: http://h.ackack.net/taking-down-facebook-worms.html