So sick. I didn't know one could hide code in an svg file. Literally just checked my site's SVG files and all seem healthy 
Those common image files could be code-injected.
Really unimaginable huh when people could find almost anything to have it their way