Over 100K+ Sites Hit by Polyfill.io Supply Chain Attack

This content originally appeared on InfoQ – JavaScript and was authored by Sergio De Simone

E-Commerce security firm Sansec unveiled a new supply chain attack affecting the Polyfill JS service when accessed through a number of CDNs hosting it. According to Sansec, over 100K sites were hit. The original author of the service, Andrew Betts, suggested removing Polyfill from any sites using it.

This content originally appeared on InfoQ – JavaScript and was authored by Sergio De Simone