Renaud Chaput on Nostr: Now, a few months after that, this domain is serving actively malicious Javascript ...

Now, a few months after that, this domain is serving actively malicious Javascript into the websites using it. They inject some malware into websites, redirecting users to sport betting websites. But they could easily also siphon everything your users enter on the website, change their content… 6/7

More details here: https://sansec.io/research/polyfill-supply-chain-attack