Note - I got bit by MIDIjs including Coinhive cryptocurrency mining scripts.

At the time (a few months ago), they had no mention of this on their website, so it took me quite by surprise. I see they have since added a disclaimer and are selling a "pro" version without this.