if you use polyfill dot io, stop RIGHT NOW and read this

[solarbird]

So, uh… if you use polyfill dot io to help power your websites, are you aware of the bad shit going down?

You should be, because it’s very bad. Malware injection bad. Details here.

(Renaud – the author of this post set – is one of the dev team at the Mastodon nonprofit. He’s not the only one talking about this, I just trust him.)

Posted via Solarbird{y|z|yz}, Collected.

Comments

[mdlbear]

Also see https://www.bleepingcomputer.com/news/security/polyfillio-javascript-supply-chain-attack-impacts-over-100k-sites/

Part of why I follow Chris Ferdinandi