You are right in saying we shouldn't jump to conclusions. That's why I did a
few tests before posting here (I tried other internet connections, I tried
livecds, I reinstalled everything...)
Notice I said "might", not "is" or "has been". I let people know that my
system was acting in an UNSECURE way and asked if anyone was noticing the
same, and that they should keep an eye on it, in case it was an attack
targetting Trisquel users.
If it was not the case, good! But it would be naive to let this pass as if
nothing had happened. And I don't see the harm in people saying "it might
have been this or that".
Now, you said it might have been a script doing something it shouldn't. Well,
that might be the case. And I will be carefull (even more lol) about what I
install in my system. But I don't think it was that.... Because if it was,
disabling JS would not affect it (user scripts run in either scenario).
Thanks for your comment anyway.