Polyfill.io domain and GitHub Account is now owned by a Chinese company

[sachinjain]

https://medium.com/@wrongsahil/protecting-yourself-from-polyfill-io-malware-as-a-user-7be300ff8b94

[croemer]

Previously discussed here (867 points, 28 days ago):

https://news.ycombinator.com/item?id=40791829

[croemer]

More detailed writeup: https://censys.com/july-2-polyfill-io-supply-chain-attack-di...

[croemer → popcalc]

I think the blog post looks a bit random, not from a known reputable source?

Better is e.g. https://www.bleepingcomputer.com/news/security/polyfillio-ja...

[pvg → croemer]

That's not much better, being blogspam of the original source but it's also, as you point out, a dupe https://news.ycombinator.com/item?id=40791829