Skip to content

Magento Security Scan reports Malicious Javascript without files

I am having a Magento 1.9.3 installation which is set up for the Magento Security Scan.

For a while now I am getting a “Issues found” report, stating that there is malicious Javascript on my website.

Your site is compromised with injected JavaScript. (62)
The malicious code signature(s) has been found on the page.

However, as you can see, there are no URLs or files stated in this report.

I have already tried contacting you via [email protected] but I never received an answer.

I ran the site via magereport and didn’t get any warning, also I downloaded all files and ran Norton Antivirus and didn’t get a result either.

Also, I tried using the Magento Yara python malware scanner and (provided I have used it correctly) didn’t get any results either.

I am having javascript on the website which is not from Magento but self-coded, could that be the issue?

Or do you have any other idea what I can do to check what’s going on here?