Skip to content

[BUG]: Showcase link sent me to a fake Apple support page — please remove it #1087

Description

@IsJosie

Describe the issue

I clicked the Deepraj / CardSwap card on the React Bits showcase page and ended up on a fake Apple support site.

It filled my screen, kept playing spoken warnings telling me my Mac was in danger, and urged me to call a phone number. Chrome became unresponsive, and I eventually had to close and restart it. This honestly scared me — I thought my computer had been infected. I wasn't expecting this from a link featured on the official showcase.

This happened on September 16, 2026. The card links to architech-dev[.]tech. My browser history showed redirects through cf.neat-slate[.]site and myhealthyjoys[.]com, ending on a page titled “MacBook Security & Protection”.

Could you take this entry down while checking what happened to the destination? Someone else could end up calling that number.

The entry is in src/constants/Showcase.js. I don't know who currently controls the external domain. I've written the suspicious domains with [.] to avoid making them clickable.

Thanks for looking into this.

Image Image

Reproduction Link

No response

Steps to reproduce

Observed on September 16, 2026:

  1. Opened https://reactbits.dev/showcase.
  2. Clicked the Deepraj / CardSwap showcase card.
  3. Was redirected to a fake Apple support page with repeated spoken warnings.
  4. Chrome became unresponsive and had to be closed and restarted.

Please use an isolated environment if investigating the external link.

Validations

  • I have checked other issues to see if my issue was already reported or addressed

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions