Server-Side Credit Card Skimmer Lodged in Obscure Plugin

There are plenty of widely-used code snippet plugins available but in this case the attackers decided to use a very obscure plugin called Dessky Snippets, with only a few hundred active installations at the time of writing.