The new Chinese owner of the popular Polyfill JS project injects malware into more than 100 thousand sites.
  • mark@programming.dev
    8·
    9 days ago

    Not many things require a polyfill these days. My guess is a lot of older sites are affected.

    • stevedidwhat_infosec@infosec.pub
      6·
      9 days ago

      Intuit uses pollyfill… and a lot of people use that service.

      Cloudflare and fastly wouldn’t be setting up mirrors if it weren’t still being used, I can guarantee that.