A single contaminated supplier lot slipped through some of the biggest online stores before anyone knew what was in it.