https://davidgerard.co.uk/blockchain/2017/09/28/etherdelta-hack-malicious-javascript-in-a-contract-name-stealing-the-users-key/
The EtherDelta hack: malicious JavaScript in a contract name, stealing the user's private key