Describe the issue
I clicked the Deepraj / CardSwap card on the React Bits showcase page and ended up on a fake Apple support site.
It filled my screen, kept playing spoken warnings telling me my Mac was in danger, and urged me to call a phone number. Chrome became unresponsive, and I eventually had to close and restart it. This honestly scared me — I thought my computer had been infected. I wasn't expecting this from a link featured on the official showcase.
This happened on September 16, 2026. The card links to architech-dev[.]tech. My browser history showed redirects through cf.neat-slate[.]site and myhealthyjoys[.]com, ending on a page titled “MacBook Security & Protection”.
Could you take this entry down while checking what happened to the destination? Someone else could end up calling that number.
The entry is in src/constants/Showcase.js. I don't know who currently controls the external domain. I've written the suspicious domains with [.] to avoid making them clickable.
Thanks for looking into this.
Reproduction Link
No response
Steps to reproduce
Observed on September 16, 2026:
- Opened https://reactbits.dev/showcase.
- Clicked the Deepraj / CardSwap showcase card.
- Was redirected to a fake Apple support page with repeated spoken warnings.
- Chrome became unresponsive and had to be closed and restarted.
Please use an isolated environment if investigating the external link.
Validations
Describe the issue
I clicked the Deepraj / CardSwap card on the React Bits showcase page and ended up on a fake Apple support site.
It filled my screen, kept playing spoken warnings telling me my Mac was in danger, and urged me to call a phone number. Chrome became unresponsive, and I eventually had to close and restart it. This honestly scared me — I thought my computer had been infected. I wasn't expecting this from a link featured on the official showcase.
This happened on September 16, 2026. The card links to architech-dev[.]tech. My browser history showed redirects through cf.neat-slate[.]site and myhealthyjoys[.]com, ending on a page titled “MacBook Security & Protection”.
Could you take this entry down while checking what happened to the destination? Someone else could end up calling that number.
The entry is in src/constants/Showcase.js. I don't know who currently controls the external domain. I've written the suspicious domains with [.] to avoid making them clickable.
Thanks for looking into this.
Reproduction Link
No response
Steps to reproduce
Observed on September 16, 2026:
Please use an isolated environment if investigating the external link.
Validations