-
-
Notifications
You must be signed in to change notification settings - Fork 442
Expand file tree
/
Copy pathjsrepository-backdoored.json
More file actions
29 lines (29 loc) · 1.13 KB
/
Copy pathjsrepository-backdoored.json
File metadata and controls
29 lines (29 loc) · 1.13 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
{
"polyfill.io": [
{
"summary": "Reports indiciate that new owner of polyfill.io is serving malicious code. See info for more details.",
"severity": "high",
"extractors": [
"^https://polyfill\\.io/",
"^https://cdn\\.polyfill\\.io/",
"^https://[a-z0-9\\-]+\\.polyfill\\.io/",
"^https://www\\.googie-anaiytics\\.com/",
"^https://kuurza\\.com/redirect\\?from=bitget",
"^https://bootcdn.net/",
"^https://bootcss.com/",
"^https://staticfile.net/",
"^https://staticfile.org/",
"^https://unionadjs.com/",
"^https://xhsbpza.com/",
"^https://union.macoms.la/",
"^https://newcrbpc.com/"
],
"info": [
"https://blog.cloudflare.com/automatically-replacing-polyfill-io-links-with-cloudflares-mirror-for-a-safer-internet",
"https://sansec.io/research/polyfill-supply-chain-attack",
"https://www.securityweek.com/polyfill-supply-chain-attack-hits-over-100k-websites/",
"https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/"
]
}
]
}