Hundreds of e-commerce sites hacked in supply-chain attack Attack that started in April and remains ongoing runs malicious code on visitors' devices.