Dear @newsinlevels,
We are sorry for any inconvenience!
In fact, it was not a malware attack but a vulnerability issue in the plugin.
WordFence had found a vulnerability in the plugin and reported about it.
The issue was solved within 5 hours, and WordFence had an announcement about it as well, stating that we have fixed the issue ASAP.
Please, don’t worry about this. Everything is fixed and is under control now.
1) Please make sure you have updated the plugin to the latest version >= 3.64.1.
2) Inside the popup settings from ‘Custom JS or CSS’ https://prnt.sc/rgcdqa please remove all unknown codes and save the popup.