this post was submitted on 26 Jun 2024
136 points (97.9% liked)

Tech

417 readers
2 users here now

A community for high quality news and discussion around technological advancements and changes

Things that fit:

Things that don't fit

Community Wiki

founded 7 months ago
MODERATORS
Vacant
136
Remove Polyfill.io code from your website immediately • The Register (www.theregister.com)
submitted 2 months ago by [email protected] to c/tech
12 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] CodeMonkey 12 points 2 months ago (2 children)

This is not a supply chain attack, it is sudden extreme enshitification. according to the article, the attacker also bought the GitHub repo, so all releases should be considered tainted. The community will have to find a fork from before the acquisition and hope that there are no pre-purchase favors smuggled in.

[–] Kissaki 9 points 2 months ago* (last edited 2 months ago)

This is not a supply chain attack, it is sudden extreme enshitification. according to the article, the attacker also bought the GitHub repo

I don't see how buying the GitHub repo as well makes it not a supply chain attack but enshitification.

They bought into the supply chain. It's a supply chain attack.

[–] [email protected] 3 points 2 months ago

I thought Polyfill was a Google thing. I remember when they implemented it on YouTube and the Firefox performance was dire.