Ah found it: https://sitecheck.sucuri.net/

At least the pages I looked today at aren't recognized by this external tool. Only green checkmarks, also the "List of scripts included" doesn't see the 2 scripts added dynamically by the injected code in the post.

The Wordpress plugin would probably do a better job.