: Malicious scripts can steal login IDs and passwords for your other accounts (e.g., banking or social media) through "credential stuffing" attacks.