I guess the spammers saw my totally useless complaint about spam, because somehow they managed to defeat the capcha for comment posting.

I’m guessing there was a nucleus exploit, so I have upgraded to the latest version and will see what happens.