My old school newspaper (the Daily Cal) is doing it, O’Reilly wittingly did it, and now Matt Cutts of Google has a post on why not to do it, or, if you are doing it for a good reason (say reputable traffic exchange, not PageRank inflation) then how to do it without penalty (use nofollow).
I don’t like nofollow, but spam screws up all sorts of things.