@MarceloYuri
I'm going to be real and non-aggressive with you for a moment, okay.
1) Javascript is sandboxed. As far as malicious infectious scripts go, that's pretty much the main route if you don't enable say Adobe Flash. The likelihood of an attack vector through there is fairly limited. Now if you're on Internet Explorer or anything with an ActiveX like engine, all bets are off if you give a site permission to run that. My opinion is: Don't give a site those kinds of permissions.
1.1) All bets are also off if a site asks you to install a plugin for your browser, and you install it.
2) The issue stated by McCafee is a "phishing" claim. Phishing has very little to do with "malicious script" running, and everything to do with a service or domain pretending to be another service or domain. That is not happening here, and I highly doubt that would be happening through google's adsense program. And the first line of defense against that, would be not entering your credentials into any website that isn't the actual website. Pay attention to URLs. The second line of defense would be making sure you're not using untrusted networks/wifi that could be used for a potential man-in-the-middle attack.
The website, from everything I can see, is benign. And it is highly likely that McCafee, which is an over zealous poorly researched service that doesn't give a crap about its users and never has, is presenting a false positive.
McCafee is crapware at best, a virus at worst.