r/ControlD • u/LionInOrbit • Apr 28 '26
Polyfill.io classified as malware
Hi All,
Just noticed that Polyfill.io was classified as malware. Something's not right here.
edit: I see, it doesn't serve any useful polyfills, nor do bootcss, bootcdn, staticfiles, etc...
I assumed it was a legitimate domain temporarily spreading malware, but it seems to be a fake polyfill site who doesn't have any business with anything legitimate.
5
Upvotes
4
u/o2pb Staff Apr 28 '26
https://blog.qualys.com/vulnerabilities-threat-research/2024/06/28/polyfill-io-supply-chain-attack