we are still trying to figure out how it’s being caused. we’ve done site scans, checked our database for exploits, and many other things, but this seems to be quite elusive. We should have it 100% fixed by the end of the week.
Last time when we fixed it, it seemed to be temporary and it came back. Thanks for your patience though, we will definitely get it squared away asap.