Intel

AIKIDO-2024-10145

polyfill-io-loader is vulnerable to Malicious Code

Malicious CodeCVE-2024-38526

100

Critical Risk

This Affects:

TL;DR

polyfill-io-loader uses polyfill[.]io, which is taken over by attackers and serves malicious code.

Who does this affect?

You are affected if you use polyfill-io-loader.

Background info

polyfill-io-loader is vulnerable to Malicious Code in all versions.

How to fix this

Remove this package from your application.