Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

[BUG]: Phishing warning on fonts.openmaptiles.org

Open
#7,755 2 comments 2 reactions 1 assignee View on GitHub

Maintainers usually reply within 1 day

@emilykl is already working on this.

Since Aug 31, 2026.

Assessment

This issue has not been assessed yet.

Description

bug P2 size: 1
Description

Client raised issue with us, that when accessing the sites containing maps, they get access blocked due to phising alert. Upon investigation I found that the site fonts.openmaptiles.org has phising alert. This site is the source of fonts used by maps.

It seems that Plotly.py is referencing fonts.openmaptiles here: mimeExtension.js, so the true source of the problem is Plotly JS, not sure if i should maybe raise a ticket there instead?

Screenshots/Video

I cannot reproduce what my client experienced exactly, as I don't use the same security. But when accessing the font site I get the phising alert in the browser.

Image
Steps to reproduce

Plotly.py version: plotly==6.6.0

How to know that my map references the compromised source?

  1. Go to a page with the Plotly map using chrome browser
  2. open the devtools in chrome, go to Network
  3. reload the page
  4. use search option to search for openmaptiles
Image
Notes

same issue reported in other libraries:

Since I thought that OpenStreetMap is a problem I tried other map styles, but the file is still showing.

Dominant language
JavaScript
Stars
18.4k
Forks
2k
Avg merge
1d 17h
Merged PRs (30d)
22

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from plotly/plotly.js

All issues in plotly/plotly.js

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.