Domain registrar Namecheap has suspended the domain of Polyfill.io, a JavaScript library that was found to be infected with malware. Namecheap Takes Down Polyfill.io ...

A domain that more than 100,000 websites use to deliver JavaScript code is now being used as a conduit for a Web supply chain attack that uses dynamically generated payloads, redirects users to ...

Polyfill.io, a JavaScript library that nullifies differences between web browser versions, was infected with malware and used in supply chain attacks after the project owner changed in February 2024, ...

In context: Polyfills are snippets of JavaScript code that provide modern features on older web browsers. There's nothing wrong with polyfills per se, but miscreants and cyber-criminals can easily ...

About 100,000 sites have potentially been compromised in a supply chain attack following an alleged Chinese firm’s takeover of a popular open-source library. The compromise involved the acquisition of ...

UPDATE 6/28: Domain registrar Namecheap has shut down the Polyfill .io domain, thereby eliminating the previous issue posed to almost 500,000 websites, web security firm C/Side CEO Simon Wijckmans ...

More than 384,000 websites are linking to a site that was caught last week performing a supply-chain attack that redirected visitors to malicious sites, researchers said. For years, the JavaScript ...

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. Website administrators are being urged to remove the Polyfill.io service immediately after it was ...

One of the biggest digital supply chain attacks of the year was launched by a little-known company that redirected large numbers of internet users to a network of copycat gambling sites, according to ...

UPDATE 6/28: Domain registrar Namecheap has shut down the Polyfill .io domain, thereby eliminating the previous issue posed to almost 500,000 websites, web security firm C/Side CEO Simon Wijckmans ...