Sometimes this can happen from an ad that is loaded that has the injection. If it’s a javascript issue,I doubt it infects the source code. It would try to affect the browsers hitting the site.