The polyfill.io Sign-In Phishing Incident on janert.me
For a brief time, starting after 01 June 2026 (when there was no apparent problem) and 18 June 2026 (when the problem first came to my attention), visitors to this site were faced with a spurious “Sign-In” pop-up, identifying itself as “polyfill.io”.
This was a (late) consequence of the 2024 polyfill.io supply chain attack. If, by chance, you entered any credentials, you may want to change them where necessary.
The content and hosting of this site was (to my knowledge) never compromised.