JavaScript
Security incidents tagged JavaScript. Newest first.
0 JavaScript incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 847
- Longest quiet run: 847 days (Jun 28–Oct 22)
Show 1 older incident1 older incident
June 2024 1
Highpolyfill.io CDN turned malicious on 100k+ sitesPatched
polyfill.io CDN Patched
The polyfill.io domain and GitHub account were bought in February 2024 by a Chinese company. The CDN, embedded via cdn.polyfill.io on more than 100,000 sites, then served malicious JavaScript that redirected some mobile visitors to a sports betting site. Sansec exposed it on 2024-06-25. Cloudflare began rewriting polyfill.io links to its own mirror, and Namecheap put the domain on hold.
