The site had already been hacked before us! & Skyward Fire

During an authorized penetration testing simulation on a live WordPress target (bakerella.com), the scanner’s static code analyzer triggered a massive alert, successfully uncovering an active, highly obfuscated Magecart / Third-Party JavaScript Injection hidden directly inside the target's source code.The malicious script utilizes double encoding (decodeURI), manipulates localStorage/sessionStorage to hijack sessions, and dynamically injects high-priority scripts from a known malicious domain:https://changeablecats.com.I have recorded a complete, high-quality technical video demonstrating the full process of uncovering this threat under the classic "Skyward Fire" electronic beat.