‘In February this year, a Chinese company bought the domain and the Github account. Since then, this domain was caught injecting malware on mobile devices via any site that embeds cdn.polyfill.io.’
https://sansec.io/research/polyfill-supply-chain-attack
John Spurlock /
npub1wq…d0jzj
2024-06-25 22:59:08
Author Public Key
npub1wqjlee9p7c2dv508taf4fynpyj2jcnn27nhljdtx8s356wk3srxqld0jzjPublished at
2024-06-25 22:59:08Event JSON
{
"id": "76c39b1c06de5e6d130d66b37f13efb851e49271406d6f2155dc09f8de7ec9e1",
"pubkey": "7025fce4a1f614d651e75f5354926124952c4e6af4eff935663c234d3ad180cc",
"created_at": 1719349148,
"kind": 1,
"tags": [
[
"proxy",
"https://podcastindex.social/users/js/statuses/112679265780792308",
"activitypub"
]
],
"content": "‘In February this year, a Chinese company bought the domain and the Github account. Since then, this domain was caught injecting malware on mobile devices via any site that embeds cdn.polyfill.io.’\n\nhttps://sansec.io/research/polyfill-supply-chain-attack",
"sig": "0bae699c5eee6dc37bcc2539dad2ff226ad534900793c8eda9a69c95b27fe0360b1896ee86ac946ea2d9479283977d604f37ab6b14846816c8c73771deecd0b0"
}