A script nobody touched can lose its valid signature overnight, and adding a byte order mark alone will not bring it back.