Magecart has been very $ucce$$ful at hiding in JS dependencies.