Some older browsers knew a little about JavaScript but couldn’t handle image effects. This line checks to see if the JavaScript code can detect any images on the page.

JavaScript is a programming language used to make websites interactive and dynamic. Features such as buttons that respond to ...

The image probably isn't loaded by that time. I mean, it's probably a couple milliseconds, if that, between when you assign that src and when you ask for the width and height.

The malicious code is hidden within a CDATA section of the SVG file and relies on a static XOR key to decrypt a payload at ...

The authors turned to polyglot images to add the JavaScript code that redirects to a page offering a fake reward. The malicious code is hidden in a BMP type of picture and it is heavily obfuscated.