I'm sorry to hear your site is damaged. It only takes one line of malware to reinfect a site.
Likely, you have overlooked a file that contains malware. You mentioned that everything is up to date but you didn't say you have deleted the files and replaced them with new ones.
You have probably already looked at this guide. But if you follow the process it describes, you will have a clean site except for wp-contents.