It comes up with a warning message “Source NOT SECURE”...............
If it is not asking for financial information or logon information I don’t think it’s much of a threat.
The image tag probably had an HTTP as opposed to HTTPS URL. Almost no one allows HTTP (non SSL/TLS) content anymore.