Security researcher Rik Ferguson at Trend Micro discovered a number of Facebook apps that were actually malware. Use them, and they would steal your credentials and immediately begin spamming your friends with bad links. (One of my Facebook friends ran afoul of one of these, because I got some of the spam.) Facebook has disabled the bad apps, so for the moment you have nothing to fear. However, there will probably be some new threats popping up soon.