thumbnail Government and university websites targeted in ScriptAPI[.]dev client-side attack - c/side