Polyfill.io Panic: Websites Hijacked by Malware, Urgent Removal Advised

Website administrators are urged to remove Polyfill.io immediately due to malware concerns. This once-popular service, now owned by a Chinese company, has been caught injecting malware into mobile devices. Google warns that websites using Polyfill.io may redirect visitors to malicious sites.

Hot Take:

Well, it looks like the Polyfill.io service is now filling in malware gaps instead of browser gaps. Who knew JavaScript could be both a superhero and a supervillain?

Key Points:

– Polyfill.io was sold to a Chinese company in February 2024.
– The original developers warned about potential supply chain attacks post-sale.
– Sansec security experts found Polyfill.io serving malware to site visitors.
– Google alerted affected advertisers about potential malicious redirects.
– Alternative trusted versions of the Polyfill service are available from Cloudflare and Fastly.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here