Keep in mind, for those of you ready to change your passwords, that you have to wait until AFTER the exploit is fixed to do so.
But, if you want to see what kind of trouble you need to prepare for,
here's a list of sites and whether they are infected or not (I note with interest that Bittorrent and Android Police are infected while Pirate Bay is not. Also note that LiveJournal is clear).