I have checked with my all the sites with the bundle and merge js I am getting the same issue for all the sites i.e. Magento Compromise Injection.
When I remove bundle and merge js then security scan works fine.
It is default Magento having the problem or is there anything that I missed.
How can I resolve this issue Magento Compromise Injection?