Polyfill Panic: 384,000 Websites Unwittingly Link to Malicious Code, Big Names Affected
Polyfill.io’s supply-chain attack has 384,000 websites redirecting to malicious sites. The JavaScript code, once a legitimate tool for legacy browsers, was hijacked after a February acquisition by China-based Funnull. Major companies and even government sites are affected, highlighting the vast reach of such attacks.
Hot Take:
Who knew that the bridge to the future of web compatibility would turn into a toll booth for malware? It’s like finding out your favorite ice cream shop is now selling broccoli-flavored cones. Let’s just say, the JavaScript party turned into a malicious masquerade ball real quick.
Key Points:
- More than 384,000 websites linked to a compromised JavaScript code site.
- The site, Polyfill[.]com, was acquired by a China-based company, Funnull.
- Malicious code redirected users to adult and gambling sites under specific conditions.
- Industry-wide actions included domain suspension, ad blocking, and link replacement.
- Major companies and even the federal government were affected.
Already a member? Log in here