Congrats, you just defeated the attack by manually downloading the script before running it!