JULY 2: POLYFILL.IO SUPPLY CHAIN ATTACK – DIGGING INTO THE WEB OF COMPROMISED DOMAINS

Summary from the TLDR InfoSec newsletter

This post dives into a supply chain attack on the JavaScript library Polyfill.io that affected over 384,000 hosts, including major websites. While the immediate threat has been mitigated, experts advise removing all references to Polyfill.io.