# Report URI says 15,579 websites remain infected with malicious JavaScript

_Published Friday, November 6, 2026 at 4:19 PM EST · Security · Latest · Tier 2 — Notable_

![Report URI says 15,579 websites remain infected with malicious JavaScript — Primary](https://storage.ghost.io/c/ee/88/ee889f88-37ef-43e5-9180-f9b88ee6261d/content/images/size/w1200/2026/11/Responsible-Disclosure-at-Scale.png)

Report URI has identified 15,579 websites that remain infected with malicious JavaScript, Scott Helme wrote, estimating that the sites receive more than 135 million visits each month. The attacks include payment card skimming, malware installation tricks, device exploitation and malicious redirects.

The company finds infections through direct website compromises, infected third-party scripts, injected code and expired domains that websites still use to load scripts. Helme said detection now outpaces Report URI's ability to notify affected organizations: contact information is scarce and most messages go unanswered. The company is offering regional lists to national cybersecurity centers and computer emergency response teams to help reach site operators.

## Sources

- [scotthelme.co.uk](https://scotthelme.co.uk/we-know-15-579-websites-are-infected-how-do-we-tell-them/)

---
Canonical: https://techandbusiness.org/newswire/KHneZ5gZ8N90UIcdpUCQYk
Published: 2026-11-06T21:19:16.925Z
Story chronology: 2026-11-06T16:29:31.000Z
Retrieved: 2026-11-06T22:49:10.052Z
Publisher: Tech & Business (techandbusiness.org)