Backdoor found in popular ecommerce components