Intel

AIKIDO-2024-10139

polyfill-io-feature-detection is vulnerable to Malicious Code

Malicious CodeCVE-2024-38526 Published Jun 26, 2024

100

Critical Risk

This Affects:

Are you affected? Scan for Free

TL;DR

polyfill-io-feature-detection uses polyfill[.]io, which is taken over by attackers and serves malicious code.

Who does this affect?

You are affected if you use polyfill-io-feature-detection.

Background info

polyfill-io-feature-detection is vulnerable to Malicious Code in versions 1.0.0 - 1.1.15.

How to fix this

Remove this package from your application.