Interestingly, they recently adding a Content Security Policy, which I would have thought would have prevented this bookmarklet.

https://mega.co.nz/#blog_19