I saw the same thing a few days ago. Facebook had yet another "bug" that allowed applications to be installed to your profile, without your knowledge or consent, if you visited that website while logged into FB. Story from PCWorld.

Supposedly it has been fixed. Don't think I buy that, or that it was a bug - probably a soon to be released feature.