JavaScript-based Magecart card-skimming attacks have been the main threat to e-commerce sites in recent years, but PHP code remains a major source of card skimming activity.

Programming languages: C++ overtakes PHP, but JavaScript, Python and Java still rule While the most used programming languages remain stable, there's quite a lot of change elsewhere.