A tainted version was pushed as an update to more than 800,000 active websites.
A credit card skimmer campaign discovered in early 2025 and still actively tracked as of April 2026 has compromised an ...