Just bumping this back so that readers/viewrs can see this. In case anyone wa not aware that ebaY?paypal opened up their api/dev to the world. Each & everytime they invent a new widget ot mini-app etc they have the real possibilty to build-in a new hole.
What's more, ebaY really will let anyone join! (not that anyone needs to in order to get the snippets required )
As the videos above, below and others clearly demonstrate, the hacker-scammers are exploiting this, sometimes combined with other exploits in 'blended threats', and have been.