geraintp on "Wordpress 4.0.1 Dashicons.css Malicious code?"

src:url(data:application/x-font-woff;charset=utf-8;base64,d09GRgABAAAAAFk8AA4AAAAAkVwAAQAAAAAAAAAAA........

is a font file embedded in the css file, its an optimisation, its a standard part of wp 4.0.1

;)