NewsThe Hacker News
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
More on JavaScript
Other advisories
- Not ratedosv:CLSA-2026-1793125688TuxCare security update for serialize-javascript (2 CVEs)
- Not ratedosv:CLSA-2026-1793099227TuxCare security update for serialize-javascript (2 CVEs)
- Not ratedosv:CLSA-2026-1793098798TuxCare security update for serialize-javascript (2 CVEs)
- Not ratedosv:CLEANSTART-2026-HQ75468@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon
- Not ratedosv:CLEANSTART-2026-ZH62940@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon
- Not ratedosv:CLEANSTART-2026-AH74711When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression
- Not ratedosv:CVE-2026-116811OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template
- Not ratedosv:CLEANSTART-2026-BH19743When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression
Other news entries
- NCSC-2026-0436 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe CommerceNewsNCSC-NL
- 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealerNewsThe Hacker News
- PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer PersistenceNewsThe Hacker News
- New npm malware finds a way around install script defensesNewsCSO Online
- WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension StorageNewsThe Hacker News
- Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm StealerNewsThe Hacker News
- Brevo supply-chain attack injected ClickFix scripts on customer sitesNewsBleepingComputer
- Exposed Vite servers are being probed for AWS and Azure credentialsNewsCSO Online
Source: https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html
ID