Polyfill supply chain attack hits 100K+ sites

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • uBlock

    uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

    https://github.com/gorhill/uBlock/wiki/Strict-blocking

    This only works at blocking full domains starting from uBO v0.9.3.0. Latest version is v1.58.1, so it's safe to assume most people are up to date. But noting it just in case.

    https://github.com/gorhill/uBlock/releases

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • blog

    Exactly why I have a whitelist

    https://github.com/3052/blog/blob/main/2024-06/ublock-origin...

  • importmap-rails

    Use ESM with importmap to manage modern JavaScript in Rails without transpiling or bundling.

    Before ESM I wasn't nearly as sold on skipping the build step, but now it feels like there's a much nicer browser native way of handling dependencies, if only I can get the files in the right shape!

    The Rails community are leaning into this heavily now: https://github.com/rails/importmap-rails

  • MathJax

    Beautiful and accessible math in all browsers

    Therefore, if you ever used MathJax, by possibly copying the above and forgetting, make sure to patch it out.

    [1] https://www.mathjax.org/#gettingstarted

  • MathJax-website

    The MathJax website

    I just filed a PR to remove that: https://github.com/mathjax/MathJax-website/pull/102

  • uAssets

    Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.

    Its already been blocked by Ublock filters - badware risks: https://github.com/uBlockOrigin/uAssets/blob/master/filters/...

  • polyfill-service

    Automatic polyfill service.

    The Internet Archive shows the progression of events pretty clearly.

    - In ~May 2023, the FT transferred it to Jake Champion: https://web.archive.org/web/20230505112634/https://polyfill....

    - In mid-Oct, the site stated it was "Proudly sponsored by Fastly": https://web.archive.org/web/20231011015804/https://polyfill....

    - In November 2023, this was dropped: https://web.archive.org/web/20231101040617/https://polyfill....

    - In December 2023, JakeChampion made a sequence of edits removing his name from the repo and pointing to "Polyfill.io maintainers": https://github.com/polyfillpolyfill/polyfill-service/commit/...

    - In mid-February 2024, the polyfillpolyfill account was created on Github, and took ownership over the repo.

    So sometime between October 2023 and February 2024, JakeChampion decided to sell the site to Funnull. I think the evidence is consistent with him having made a decision to sell the site to _somebody_ in December 2023, and the deal with Funnull closing sometime early February 2024.

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

Did you konow that JavaScript is
the 3rd most popular programming language
based on number of metions?