If a user downloads a malicious JavaScript file, hackers can use it to gain access to their PC to steal data or perform other damaging functions.