This is the JS file, compiled from our source, so the warning about a PHP security is not accurate. I've checked with Sucuri and looks like it requires a paid plan to run the scan. Can you please drop us a message with a temporary admin account to check this issue?