110,000 sites affected by the Polyfill supply chain attack

Published

2024-06-27 00:00

Collected

2026-07-04 10:11

---
id: 2579
title: "110,000 sites affected by the Polyfill supply chain attack"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/110000-sites-affected-by-the-polyfill-supply-chain-attack"
published_at: "2024-06-27T00:00:00Z"
tags: ["supply-chain", "incident-response", "malware", "supply-chain-attack", "cdn", "javascript", "polyfill"]
phying_url: "https://phying.com/item/2579"
lang: en
---

# 110,000 sites affected by the Polyfill supply chain attack

## Summary

cdn.polyfill.io was hijacked to serve malware to over 110,000 sites, redirecting mobile users to betting pages. Namecheap suspended the domain, but affected code and dependencies still need removal.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2024-06-27T00:00:00Z
- **Original:** https://www.aikido.dev/blog/110000-sites-affected-by-the-polyfill-supply-chain-attack
- **Phying News:** https://phying.com/item/2579