Malicious JavaScript Injection Targets 953 Magento E-commerce Stores

A threat actor has compromised 953 online stores, primarily Magento-based, by injecting malicious JavaScript through CMS blocks. The code evades detection by using scanner-evasive techniques, posing a significant security risk to e-commerce platforms.

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025.

According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks.

"When you

Read original article