135
Remove Polyfill.io code from your website immediately • The Register
(www.theregister.com)
A community for high quality news and discussion around technological advancements and changes
Things that fit:
Things that don't fit
This is not a supply chain attack, it is sudden extreme enshitification. according to the article, the attacker also bought the GitHub repo, so all releases should be considered tainted. The community will have to find a fork from before the acquisition and hope that there are no pre-purchase favors smuggled in.
I don't see how buying the GitHub repo as well makes it not a supply chain attack but enshitification.
They bought into the supply chain. It's a supply chain attack.