News for hackers. Stuff that matters.

A comment on Polyfill supply chain attack hits 100K+ sites. Parent comment

Re:Polyfill supply chain attack hits 100K+ sites by creshal on Wednesday June 26, 2024 @11:25AM (#40801118)
Or just ship local copies of your dependencies. It's not that hard.
[ Parent | on HN ]
Re:Polyfill supply chain attack hits 100K+ sites by commandlinefan on Wednesday June 26, 2024 @03:52PM (#40803927)
... and all of _their_ dependencies. And read through them all to make sure that the local copy that you shipped didn't actually include a deliberately obfuscated exfiltration routine.
[ Parent | on HN ]