WooCommerce Credit Card Skimmer Hides in Plain Sight

The attackers use what appears to be a Google Tag Manager script, a popular service used on many websites, to hide their malicious content, while using base64 encoding for obfuscation.