t4t5 / sweetalert

A beautiful replacement for JavaScript's "alert"
https://sweetalert.js.org
MIT License
22.39k stars 2.84k forks source link

SweetAlert source URL flagged as malicious #901

Open rmasemann opened 5 years ago

rmasemann commented 5 years ago

Have been using SweetAlert for 2-ish years on our website and just recently had a customer report a problem that our website was being blocked because of a script reference to unpkg.com. The SweetAlert guide page specifies the URL (https://unpkg.com/sweetalert/dist/sweetalert.min.js) we are using as our source for SweetAlert and we are not using anything else at unpkg.com. Customer's report says that unpkg.com is flagged as malicious and containing the ramnit trojan.

bugfreetech commented 5 years ago

Get the file and host it yourself (or use jsdelivr) instead of using it from a now untrusted host. Also, check out SweetAlert2