> These networks aggressively scan advertisers' javascript for suspicious code

How is Javascript that (a) reads parts of a binary file to build a new routine or (b) does silent redirects to TinyUrl NOT suspicious?! What are they looking for in these cases?