detect malicious javascript on ecommerce site

EtherHiding skimmers hide payloads in smart contracts, so blocklists fail. See the CSP, SRI and hosted-field settings that stop them at checkout.