A JavaScript skimmer that exfiltrates stolen payment data to a Telegram bot that is under the attacker’s control.