FeedBagel

All Topics

Art

Polyfill supply chain attack embeds malware in JavaScript CDN assets

2y agoen

programming

Source

SnykPolyfill supply chain attack embeds malware in JavaScript CDN assetssnyk.io

Snippet from the RSS feed

On June 25, 2024, the Sansec security research and malware team announced that a popular JavaScript polyfill project had been taken over by a foreign actor identified as a Chinese-originated company.

You might also wanna read

September 2025 NPM supply-chain attack compromises popular JavaScript packages

In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack

projectptixiakis.github.io·1mo ago

Supply-chain attack on OptinMonster and related WordPress plugins compromises 1.2 million sites

Sansec discovered an active supply-chain attack affecting over 1.2 million sites using OptinMonster, TrustPulse, and PushEngage WordPress pl

sansec.io·24d ago

JavaScript Community Faces Reckoning After Major Supply-Chain Attack

The article discusses the aftermath of the largest supply-chain attack in JavaScript history, suggesting this could be a pivotal moment for

drewdevault.com·9mo ago

Polymarket to reimburse $3 million lost in supply-chain attack via third-party vendor

Polymarket suffered a supply-chain attack where malicious JavaScript was injected into its frontend through a compromised third-party vendor

hendryadrian.com·11d ago

Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts

The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att

casco.com·3mo ago

317 npm Packages Compromised in Mini Shai-Hulud Supply Chain Attack

A major npm supply chain attack occurred on May 19, 2026, when the npm account of maintainer "atool" was compromised. The attacker published

safedep.io·1mo ago

Comments

No comments yet. Be the first.