Someone is using your site to host possibly malicious scripts

[biltongza]

I got sent a link in Facebook Messenger that looked like a legit youtube embed:

So I clicked on it. Instead of youtube I was met with this sketchy looking video player:

I inspected source and found my way to the sandbox that hosts this: https://codesandbox.io/s/295u7?file=/index.html

It looks like some nicely obfuscated shell code (?):

I'm not really sure what it does and I'm not sure what the correct way of reporting things like this is, so I figured I would start here.

[garethx]

Thanks, we've removed this sandbox.