All vendorsVendor site
JS Library / CDN
polyfill.io
China-ownedChina
Polyfill service. Sold to Funnull in 2024 and used to deliver malware — treat as compromised; remove and self-host.
SECURITY: Active supply-chain risk since Feb 2024. Cloudflare and Fastly run safe mirrors.
Detected by domain patterns
polyfill.iopolyfill.comEuropean alternatives
polyfill-fastly.iopolyfill-fastly.netSelf-hosted core-js
Does your website use polyfill.io?
Run a free StackPatrol scan to see all third-party services on your front page.