With the momentum of Web 2.0 and the changes it portends, the old myth of impossible javascript malware has been busted.