When the internet gets noisy, you can always tell who’s done the work. In late 2025, as Session Reaper began to spread across the Magento and Adobe Commerce ecosystem, the usual chaos followed. Sansec’s alerts went out, inboxes filled, and Slack channels everywhere lit up red. For many merchants, it felt like history repeating itself - it was only a year since Cosmic Sting had made headlines. The same questions surfaced: Are we affected? What’s the risk? How fast can we fix it?