i dont get the severity of this attack. for this attack to work you have to include a js from CDN that has been compromised. if you are using a high profile CDN then it would probably be learned sooner. in other case that's plain DDOS not necessarily a JS-based DDOS.