FROM CACHE - en_header is this a malware? I can't delete it!

5 0 3



I have this script in my source code on all pages:


I can't find this URL in any of my liquid file.


How can I delete this? This script is taking 4-20 second to load and is slowing down my store!


Thank you,



Replies 21 (21)
5 0 0

Same here. Once I deleted the code it hasn't come back. I've been monitoring things daily.


As an aside, I did contact Shopify about this. The code most likely came from an app. I was told they were investigating, but I haven't heard back yet.

4 1 0

I'm having a similar issue, using to check my site and it's coming up with

However I can't find it. I've scanned the website with password protection on, and it says everything is ok. I have found the code

{{ shop.metafields.theme.cdn_css }}

and removed it, however SUCURI says that wasn't the issue, it could of been an issue, but not the "malware" that sucuri says I have.

This is a recent development, that I believe came from some type of Options/Bundle app. Which one. nobody knows.

Just a guy in his garage, trying to make a living.