Scan false positive? Your site is compromised with injected JavaScript malware. (299)

[eric_saldana]

I got an alert that one my merged javascript files contains malware, upon quick analysis I don't see anything out of the ordinary, no redirects or unusual website behavior.

The file in question is the following: https://pastebin.com/raw/EFw8DE2f

Is this a false positive? Wouldn't be the first time I get a false positive from my javascript files.

[Mukesh Tiwari]

Hi @eric_saldana 

Did you try to run the scan after unmerging the js files?

[eric_saldana]

I unmerged the files and is still coming as malware positive.

This is the file the scan now detects as compromised: https://pastebin.com/gc0evLZB

[Mukesh Tiwari]

Hi @eric_saldana you may contact @msavich 

[msavich]

False positive confirmed.

Fixed.

Please expect changes to become live this Thursday 08/22