Researchers said last week they came across a malicious function that was snuck into a module in Magento in order to steal credit card information.
Source: Threadpost