This can be because of plugins and scripts with a suspicious code.
You can use CRTL + SHIFT + F if your on windows and COMMAND + SHIFT + F on mac to search through scripts.
This might also be because one of your developers has a dangerous plugin.