[machinesofn]

That's correct. I work at a company in the US, and visitors to our website were giving the "Malicious Script" alert because we had Baidu analytics installed. Defending against this is much more nuanced than just blocking all traffic from China.

[akurtzhs]

I'm curious what prompted installing Baidu analytics in the first place.

[sarciszewski]

So block the Baidu analytics CDN and call it a day?

[machinesofn]

That would work, assuming there isn't a workaround. If they were really serious about the attack, though, it's easy to imagine ways around that, especially if you add the possibility of browser caching and exploits in the injected script.