Cookie monster eats data from Sesame Street store bbc.com

Malicious software has been stealing credit card details from thousands of online stores, say researchers.

Card details were collected by a piece of malicious software, dubbed JavaScript Cookie.

The code was found in shopping cart software built by Volusion, which has 20,000 small business customers.

The issue was spotted by a security researcher while shopping for toys on the Sesame Street store.

Volusion has not yet responded to the BBC's request for comment.