A JavaScript skimmer is an injected piece of malicious code that infiltrates the POS (point of sale) for online and e-commerce websites.