Defender scan didn’t pick up the malware in the system. WordFence was able to pick it up. However, Sucuri failed to detect it too.
The Defender Scan was taking too much resources in the CPU in live site, and the host shut it down. The above scan was re-run in the cloned version on a localhost to bring this into our attention, hence no access to live site at the moment.
If needed, infected Visual Composer plugin is attached via the chat notes.