Website hacked , malicious Javascript injected

Hi there

My website has been hacked and sucuri scan shows malicious javascript injections

This is my website

http://supersonichire.com.au

Please can someone help me remove it? I have tried doing this myself and have read all the available wordpress resources on hacking and malicious code.

I can see the malicious code (javascript) in the source code of my website. I have tried to work through all of my files to find it but no luck! I have scanned using word fence , gotmls, and other malicious code scanners…but only sucuri seems to be able to pick it up. I unfortunately can’t afford the $200 to get it removed 🙁 money is tight at the moment.

Please good Samaritans, I would greatly appreciate your help!