June 25th, 2024

Malicious Code Injection Found in CDN Polyfill Link Targeting Mobile Users

Polyfill.io selectively polyfills browser features based on User-Agent headers. Tailored polyfills are provided, with official documentation on their website. Contribution guide on GitHub, self-hosting info, and MIT license available.

Read original articleLink Icon
Malicious Code Injection Found in CDN Polyfill Link Targeting Mobile Users

Polyfill.io is a service designed to selectively polyfill only the necessary features based on the User-Agent header of each browser request. The service aims to provide tailored polyfills for each requesting browser. The official documentation for Polyfill.io can be accessed on their website. Those interested in contributing to the project can consult the contributing guide available on GitHub. Additionally, information on self-hosting the Polyfill.io service can be found in a dedicated repository. Polyfill.io operates under the MIT license, details of which can be found in the project's repository.

Link Icon 3 comments
By @luhn - 4 months
Specific details of the malicious code are downthread a bit: https://github.com/polyfillpolyfill/polyfill-service/issues/...