You should always download jQuery and link it locally because antivirus vendors make stupid mistakes? That doesn't make much sense at all. They could just as well decide "/scripts/jquery-min.js" was a vulnerability if they found that on a lot of infected sites.