June 27, 2024 at 11:56PM
After its website shutdown, Polyfill.io’s owner battles accusations of distributing suspicious code on various websites. Anger-fueled social media posts target CDN titan Cloudflare and media for “malicious defamation.” Experts and a domain registrar warn of supply chain risks. The site has relocated to polyfill[.]com. Cloudflare also launches a JavaScript URL rewriting service for affected websites.
It seems that the polyfill.io service is caught up in a controversy regarding the smuggling of suspicious code onto websites, resulting in their website being shut down and subsequently relaunched as polyfill.com. The service was accused of sneaking malicious code onto websites, prompting action from domain registrar Namecheap to shut down polyfill.io.
Additionally, there are concerns about the ownership and background of CDN operator Funnull, as it claimed to be based in Slovenia, with various office addresses around the world that don’t exist. There are suspicions that the business may be a Chinese entity despite its Twitter account claiming to be based in the UK.
Cloudflare has also expressed concerns about the supply-chain risk posed by the .io domain and its potential to change JavaScript code to malicious scripts, which has apparently become a reality. As a response, Cloudflare has activated an automatic JavaScript URL rewriting service for websites using Cloudflare-proxied sites to mitigate the risk of a supply chain attack.
The Polyfill service owner has reacted angrily to Cloudflare’s actions, claiming to have $50 million in funding and expressing intentions to develop a global CDN product to surpass Cloudflare. It is clear that there are contentious issues and allegations surrounding the polyfill.io service, its ownership, and the actions taken by various entities. These issues should be monitored closely, and any decisions made regarding the usage of the service should be approached with caution.