Just an FYI for future spam emails:
Everyone's first post goes through the moderation queue. If the post looks legit, the sender gets tagged to be able to post immediately w/o moderation. Sometimes a valid sender turns spamy (if their account gets hacked, for example) and is able to post spam. When this happens, I manually put the sending email address back in the state where posts need to be approved before going out. So you can rest assured it wont happen again, at least from the same sender.