A PHP skimmer injected into a Magento 2 core file and used to steal login data from HTTP requests.