Thanks for the clarification. I've re-read this headline a dozen times and it finally makes sense. By removing the phrase "that hacked fliers" you're left with

Thanks for the clarification. I've re-read this headline a dozen times and it finally makes sense. By removing the phrase "that hacked fliers" you're left with "Suspect code 'found'". Which is the core of the statement. But that doesn't give enough context so the reference to the fliers was added. I also think they wanted to lead with "British Airways" so a bit of contortion was necessary.