The existance of just this sort of script is why I generally council clients of mine not to put email addresses on their websites directly, with the exception of "catchall" email accounts like info@blah.org and such.

Email harvesting is quite frequently the tool of spammers.