1. Don't click custom token URLs you don't trust. 2. Refresh EtherDelta for a patched version that prevents malicious custom tokens.

 — @etherdelta