I am using Deezer Javascript SDK and loaded it over https.
This happens when your page and remote resource are using different HTTP protocols: one uses HTTP and another uses HTTPS.
The preferred way to include third-party scripts is this one:
Removing https: or http: tells browser to load the document using same protocol as current page. This should eliminate security warnings.