Your frontend was just hijacked!

I can steal anything, impersonate and execute code in the context of the current domain,
which is: