If you embed third-party code, you expose your users to dangers like this. Please at least use Subresource Integrity (https://developer.mozilla.org/en-US/docs/Web/Security/Subres...) but best host the code yourself, as that also protects your users' privacy.