Magecart was a major client attack using JavaScript injected into a site, is transferred to the client. It was form of data-harvesting exploit and targeted online shoppers and web forms as customer checks out. The magecart script skims off user account information that may include passwords, e-mail addresses, and card numbers etc and is sent back to a server operated by the attacker.