Someone hacks the server, puts a .js file in there, reports it. JS file is removed, but Google wont remove the warning until you ask them too... 'under review'
Nice...
Even though it was removed yesterday, they still have it there -
It should be gone in a few hours as they have indicated they would.