Identify spam injection plugin

Infected plugin?

Outbound links have started appearing on one of my WordPress sites. They appear in posts and pages, though it mainly seemed to be in two separate waves with very different links topics.

Here is an example of the link text and link:

I’m the only human with access to the site, so I suspect there is an infected plugin. However, I have no idea how to track down who/what is making these changes.

• This topic was modified 1 year, 9 months ago by James Huff. Reason: spam content removed
• This topic was modified 1 year, 9 months ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Everything else WordPress topic