Google delisted the image conversion tool earlier this month, but not before it had likely been modifying thousands of users' ...
Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at runtime.