Urgh: https://www.lostdot.cc/race/tcrno10 tries to (possible indirectly) load JavaScript from the known to have become malicious domain polyfill[.]io.

#TCRNo10 #Polyfill #polyfill_supply_chain_attack

#TCRNo10 | Lost Dot

Over 100K+ Sites Hit by Polyfill.io Supply Chain Attack

E-Commerce security firm Sansec unveiled a new supply chain attack affecting the Polyfill JS service when accessed through a number of CDNs hosting it. According to Sansec, over 100K sites were hit. T

InfoQ