Homepage Malware Cleanup Needed

My site’s homepage was recently compromised and now contains suspicious or malicious scripts that were never there before. I need someone who can quickly pinpoint every snippet of injected code, remove it without breaking the existing design or functionality, and harden the site so the problem doesn’t return.

What I expect from you:
• A thorough scan of all homepage files (core code, theme/template, plugins, databases, external calls) to locate the malicious scripts.
• Safe removal or replacement of the infected code, followed by visual and functional testing to confirm everything renders exactly as it should.
• A concise report detailing what you found, what you removed, and any vulnerabilities you discovered.
• Post-cleanup hardening: update permissions, patch outdated components, set up a basic firewall or security plugin if appropriate, and add recommendations I can follow to keep the site secure.

If you already work with tools like Sucuri, Wordfence, Imunify, or manual grep/command-line methods, let me know; I’m open to your preferred workflow as long as the end result is a clean, stable homepage.

Once you’re done I’ll verify the site with an external scanner and run a handful of speed and integrity checks, so please plan for a quick follow-up in case anything pops up.