Some users have embedded a malicious JavaScript into their sites that redirect their visitors elsewhere. This is not XtGem's bug.