Hackers Infect 953 Online Stores With ScannerEvading JavaScript Mostly on Magento

An unknown threat actor has infected 953 online stores most of them running Magento as part of a longrunning campaign active since July 2025 According to Dutch ecommerce security company Sansec the activity is designed to add a small piece of code to the stores pages that when visited by unsuspecting users serves malicious JavaScript loader code through Magento CMS blocks When you