: Injected scripts that can steal admin credentials, customer email addresses, and payment information.