Hey @agirlinla, So the VigLink script is definitely on your website still. Are you running CloudFlare at all? If you disabled the VigLink plugin it would have removed it from your site. But it is your Key being used by the javascript so that’s good. I will be emailing you directly if you do want to remove VigLink, but rest assured, our plugin is not the cause of the malware.
I did run GTMetrix and Lighthouse audits on your site and did not see the moatads or those others. Was there a specific page you ran GTMetrix on that showed you those results.
First thing I would do it change passwords for everything that would connect to your site, cpanel, the wordpress login, and check what other users might have access. Also, run a virus/malware check on your personal computer as well, as it sounds like you may be infected with some malware.
