This is nuts, injecting code without website consent, pretty much like shady-ISP behaviour!