WordPress Core Js File Seems Infected

[756dk]

Hi

I have running latest version of wordpress while website loads up and I got some error in the console.

After checking the Console for the error I found error and encrypted code is in the core js file - ​https://raw.githubusercontent.com/WordPress/WordPress/master/wp-includes/js/wp-emoji-release.min.js

Kindly check the screenshot URL for the error.

Accordingly to it might be the malware or I would like to know what exactly encrypted in the JS code.

​http://imgur.com/a/CNcbr

Looking forward to hear back from you.

Thanks
Deepanshu kapoor

Hi @756dk, thank you for the bug report!

This JavaScript file is correct, it's produced during our build process, by combining and minifying wp-emoji.js​ and twemoji.js​. We minify all JS files that are used in production.

As for the NS_ERROR_UNEXPECTED JavaScript error you're seeing, this is a generic error that Firefox throws, which unfortunately doesn't tell us what's gone wrong. If you're able to reproduce this error, Firefox's dev tools should be able to prettify the source and give us a better indication of what line is triggering the error.

Alternatively, adding define( 'SCRIPT_DEBUG', true ); to your wp-config.php will use the development versions of the files, which will give us the original line number. This can occasionally stop the bug from occurring, though, if it's some sort of race condition.