Intel

AIKIDO-2024-10148

dynamic-polyfill is vulnerable to Malicious Code

Malicious CodeCVE-2024-38526 Published Jun 27, 2024

100

Critical Risk

This Affects:

Are you affected? Scan for Free

TL;DR

dynamic-polyfill uses polyfill[.]io, which is taken over by attackers and serves malicious code.

Who does this affect?

You are affected if you use dynamic-polyfill.

Background info

dynamic-polyfill is vulnerable to Malicious Code in all versions.

How to fix this

Remove this package from your application.