Is This A False Positive?

So we have reports of this happening any ideas? The checkout.js script has not been modified in 2.5 years.

(attached)

Capture.JPG

There is obfuscated code in your js/tygh/checkout.js http://www.cctvkits.co.uk/js/tygh/checkout.js If you need any support removing this or doing an audit, feel free to contact me. We will first need to start a procedure to determine what this obfuscated javascript does, and if it's malicious, contact the authorities and inform them of a breach (GDPR).