Cloudflare's Page Shield ML detected four malicious JavaScript campaigns on storefronts that security scanners like VirusTotal and URLScan missed. The ML model uses graph neural networks and large language models to analyze JavaScript behavior patterns in live traffic, catching obfuscated scripts designed to steal affiliate revenue, hijack clicks, and tamper with analytics without relying on known signatures.