Polykill - A new breed of supply chain vulnerability

[cdn.polyfill.io](https://cdn.polyfill.io) was sold to a foreign entity and is now carrying all traffic on a Chinese CDN (Baishan Cloud CDN)

We created [polykill.io](https://polykill.io) to bring awareness for the millions of sites that are currently using JavaScript that is under the control of the new entity.

This really comes down to URL/domain analysis and understanding who is serving resources that your site uses. It's hard to stay on top of an issue like this and URL trustworthiness usually does not propagate …

analysis artifact cybersecurity domain down hard issue locally organizations resources supply supply chain tooling trustworthiness understanding url