384,000 sites pull code from sketchy code library recently bought by Chinese firm
Briefly

For years, the JavaScript code at polyfill[.]com helped older browsers handle advanced functions. However, after acquisition, it began redirecting users to adult and gambling sites, emphasizing the significance of supply-chain attacks.
Following the incident, proactive measures were taken: domain suspension, CDN replacement, ad blocks, and urging site owners to remove links, highlighting swift community responses to cybersecurity threats.
Read at Ars Technica
[
]
[
|
]