Polyfill.io Supply Chain Attack

A supply-chain compromise of polyfill.js hosted on cdn.polyfill.io (after acquisition by Funnull) resulted in modified scripts that inject malicious code into any site that loads the CDN, causing redirects to scam sites, potential data theft and remote code execution; the report lists impacted domains and IOCs, cites CVE-2024-38526, and provides detection/remediation guidance and Qualys QIDs (including web malware and VM/WAS scans) and recommends removing polyfill.io references and switching to alternative CDNs.