There’s a new message in gray text under the payment buttons on our product pages: Daily Fix – Florasophy
We did not write this text, and the “cancellation policy” link takes users off our site:
It appears we’ve been hacked 
How do we fix this?
Thanks for your help!
hmm don’t think this is a hack. The cancellation policy seems to link nowhere, it seems to be part of this css class shopify-cleanslate css class. You sure the theme isn’t injecting it?
This just showed up recently. The language is suspicious, and the link
takes visitors to a sketchy looking URL …
what is the url , it takes me nowhere?
OK, the mysterious text has now disappeared from all our product pages …
I’m glad, but it definitely points to a vulnerability.
The link went to …/latest/368c9354f8d72b65b7f9.spb-494.en.js:9:5755
(you can see it one of the screenshots I posted)
