Polyfill.io, a JavaScript library that nullifies differences between web browser versions, was infected with malware and used in supply chain attacks after the project owner changed in February ...

'Polyfill.io (polyfill.js)' is a JavaScript library developed by Andrew Betts that allows developers to develop without worrying about differences in functionality between versions of web browsers.

Over 100,000 sites have been impacted in a supply chain attack by the Polyfill.io service after a Chinese company acquired the domain and the script was modified to redirect users to malicious and ...