Hijacked Shopify App Settings Sent Shoppers to Fake Payment Pages Before Checkout
In mid-October 2026, injected JavaScript in Hulk Product Options, Selleasy and Swym Wishlist Plus cancelled some Checkout clicks, sent shoppers to lookalike card pages, then forwarded them to the real Shopify checkout so the order still completed.