E-commerce vegan skincare and natural beauty platform Flora & Fauna (owned by BWX) suffered a malicious code injection attack. Threat actors established a credit card skimming pipeline on the digital checkout panel, harvesting customer payment details.