I’ve deployed yii2 app with composer some days ago. Yesterday I’ve found out that site contains coinhive cpyptominer script. Chrome says it was loaded by jquery.js.
UPD Btw I’m getting such error while using composer:
Have you any guesses what could it be? It’s not a browser virus: other sites don’t contain coinhive. It’s not a server problem: only yii2 sites have it. I’ve checked composer script but it’s not corrupted. I’ve done two setups of yii2 during last month and both have coinhive.