It could simply be a false alarm, but what script exactly is it? Are you 100% sure there's no malicious coding in it?