How VIP Mitigated the Impact of Polyfill.io Malware
When a widely-used, free CDN used by up to 4% of the web changes hands and begins serving malicious code to visitors, it’s a bad day.
Earlier this year, the GitHub account and domain for Polyfill.js / polyfill.io were transferred to a Chinese company named Funnull and the CDN service has since been discovered to be serving malware to unsuspecting visitors.
At WordPress VIP, the security of our customers and visitors to our platform is a top concern.