Previously, security researchers found web skimmers (Magecart scripts) inside favicons, site logos, live chat windows, and, most recently, in social media sharing buttons.

Back in 2012, Mozilla launched Thimble, an online code editor for teaching the basics of HTML, CSS and JavaScript. Over time, though, things got pretty quiet around the project as other browser ...