Secretly planted scripts allow malicious actors to enter at a later date. Here’s how to detect and remove them.