Thanks for bringing this to my attention! I had a hacked FTP client a few months ago, and it compromised all my sites. I thought I fixed it, but sometimes it it adds something in the header.
I don't see it on my end for now, but let's try figuring this out.