Polyfill supply chain attack embeds malware in JavaScript CDN assets | Snyk

Polyfill supply chain attack embeds malware in JavaScript CDN assets | Snyk

On June 25, 2024, the Sansec security research and malware team announced that a popular JavaScri...概要を表示 On June 25, 2024, the Sansec security research and malware team announced that a popular JavaScript polyfill project had been taken over by a foreign actor identified as a Chinese-originated company, embedding malicious code in JavaScript assets fetched from their CDN source at: cdn.polyfill.io. Sansec claims more than 100,000 websites were impacted due to this polyfill attack, including publicly