Since July 2025, a threat actor has injected a JavaScript loader into 953 online stores, most of them running Magento, Sansec ...