A sophisticated client-side JavaScript attack has compromised over 500 websites, including high-profile government and university domains. The malicious campaign, which…