JavaScript Malware - How bad can it be?