Hosting company that delays the renewal of your domain name, injects malicious code
Try to buy or move domain to a Registrar, may be your hosting company is just a reseller for some services, when you buy a domain from Registrar, they are obliged to follow the policies of domain Registry.
No hosting company injects malicious code themselves; usually vulnerability of the web application you use is the reason for malicious code.