Update: According to Sansec, Convertr removed the code this morning, updated the statistics program where it was hidden, and claims to be notifying merchants, payment processors, and authorities. Sansec confirmed at 10:08 AM that the file is now clean. However, according to Sansec themselves, your browser may still store the infected version for up to 24 hours after cleanup—meaning the risk persists until approximately tomorrow morning. If you made a purchase with a card since the 24th and the payment page had “checkout.convertr” in the URL, the advice remains: contact your bank, request to block and replace your card, and monitor your CPF for any unusual activity.