Malware

Hi,
We crosscheck all of our team plugin, there are no way to do it, just keep up to date of the plugin and it’s not an issue.

My provider let me know a hacker is inserting code into the header.

That just means your site was compromised.

Please remain calm and give this a good read.

https://www.ads-software.com/support/article/faq-my-site-was-hacked/

When you have successfully deloused your site then consider giving this a read too.

https://www.ads-software.com/support/article/hardening-wordpress/