Okendo Reviews Supply Chain Attack

Reported 18 Jun 2026 by otx · Severity: medium

On May 14, 2026, a supply chain attack was discovered targeting the Okendo Reviews widget, a customer review platform used by over 18,000 brands. The threat actor injected malicious JavaScript code into the legitimate widget, which is deployed on high-traffic e-commerce pages inc