I am run google ads that was show me malicious code

I am try to run google ads that showed me malicious code on Shopify site /cart.js and payments/config?currency =usd

how to fixed this

the link URL

https://ersdemo.myshopify.com/cart.js and https://ersdemo.myshopify.com/payments/config?currency=USD this two URL I want to remove or don’t allow to access publicly