易主後的polyfill.io被用來執行供應鏈攻擊
支付動態 · 2024-06-27
知名的Polyfill函式庫polyfill.io在今年2月易主之後，被用來進行供應鏈攻擊，針對嵌入該函式庫的網站植入惡意程式，資安業者呼籲網站管理人員關閉Polyfill，或是改用其它較為可靠的服務
同樣是在今年2月polyfill.io易主之後，Polyfill專案的作者Andrew Betts也警告各網站應立刻移除polyfill.io。Betts還澄清，雖然他建立了Polyfill服務，但從未擁有該網域名稱，也從未參與它的銷售。
Sansec則說，這家中國公司同時購買了polyfill.io及其GitHub帳戶，且不時有用戶至其GitHub帳戶提出控訴，只是都被刪除。
Sansec建議，不再需要Polyfill函式庫的網站應該立刻移除polyfill.io，或是改用由Fastly或Cloudflare所提供的Polyfill方案。
Popular articles
Indiana online casino bill stalls in House committee
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
British gambling levy rates confirmed for each vertical
Regulation
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Kazakhstan plans to penalise online casino promotions
Regulation
