Hi malware fighters,
JavaScript in combination with other techniques is still one of the major vectors to get malicious code onto your machine via the browser. So you are well advised to have JavaScript disabled except for those sites that are safe. The NoScript add-on is the way to do that for the Firefox 2.0 or the Flock browser.
To-day there are scanner that can view all the add-ons you use in a FF or Flock browser, and various attacks can be made automated. See this for info on fex:
http://www.gnucitizen.org/projects/fex/
For the malware vector automation: http://www.gnucitizen.org/projects/javascript-attack-channel/
and: http://www.gnucitizen.org/blog/javascript-spider
polonus