Polyfill supply chain attack hits 100K+ sites(sansec.io)
738 points by gnabgib | 304 comments
Sansec threat research post reporting that the new Chinese owner of the Polyfill JS project is injecting malware into more than 100,000 websites.
#sansec on Hacker News
1 story tagged sansec, newest first.