Yesterday after clicking a few links on HN's top page, I found three instances of `bash` running, according to Activity Monitor (on OS X). The second I quit Chrome, they all went away. Sounds like Chrome somehow fell for a Shellshock exploit in one of the websites.
If you're on OS X, you may want to check Activity Monitor and see if you have any instances of bash running that you can't account for.
