I'm sure I'm not the only one who got a LinkedIn spam email today (mine was supposedly from a lecturer at the University of the West Indies). I didn't click the link that leads to the Trojan, of course, but even if I had, my default browser is Firefox, with NoScript running, so wouldn't have been a problem.
This, along with the Twitter hack that people here had problems with, is a good example of why you shouldn't let scripts run by default on your browser. And if you're one of those admins who insist on using javascript to make your website useable, you're doing us all a disservice.