Phishing attempts are being made on LJ. Short version: If you get a comment that is accompanied by a pop-up asking for your password, don't give it your password. If you've already done that, go change your password.
More information here
More information here