Credit card scraper malware in Magento 2.4. Need help finding source

Question

I upgraded our Magento from 1.9 to 2.4.1 after we found malware that was trying copy customer credit cards before allowing the customer to use PayPal.

I used Magento\