M\u00e1s de 110,000 sitios web que utilizan la biblioteca de JavaScript de c\u00f3digo abierto Polyfill para garantizar la compatibilidad con versiones antiguas de navegadores se convirtieron en v\u00edctimas de cambios maliciosos introducidos en el c\u00f3digo de la biblioteca por un nuevo propietario del proyecto. En la biblioteca, cargada en los sitios a trav\u00e9s del dominio cdn.polyfill.io, se integr\u00f3 c\u00f3digo malicioso que redirige a los usuarios a sitios fraudulentos (como googie-anaiytics.com), casas de apuestas y casinos en l\u00ednea.<\/p>\n
El proyecto Polyfill fue vendido en febrero a la empresa Funnull de China, que obtuvo acceso a la cuenta de GitHub y al sitio polyfill.io. Unos meses despu\u00e9s de la adquisici\u00f3n, el nuevo propietario organiz\u00f3 un esquema de monetizaci\u00f3n fraudulento relacionado con la redirecci\u00f3n de parte de los usuarios a sitios dubitativos. La redirecci\u00f3n ocurr\u00eda con cierta probabilidad, en horas espec\u00edficas y bajo condiciones como abrir el sitio desde un tel\u00e9fono m\u00f3vil y la ausencia de cookies que indicaran que la p\u00e1gina hab\u00eda sido abierta por un administrador del sitio. Al detectar sistemas de an\u00e1lisis web en el sitio, la redirecci\u00f3n se retrasaba unos segundos para no aparecer en las estad\u00edsticas de esos sistemas.<\/p>\n
Es notable que el nuevo propietario elimina de GitHub cualquier queja que se\u00f1ale actividad sospechosa o cambio de propietario, y aparentemente espera que los usuarios consideren la redirecci\u00f3n autom\u00e1tica como una iniciativa de los autores de los sitios originalmente abiertos.<\/p>\n
Se recomienda a los usuarios de Polyfill que eliminen lo antes posible el c\u00f3digo para cargar la biblioteca a trav\u00e9s del host cdn.polyfill.io. Se se\u00f1ala que en la actualidad ya no es necesario Polyfill, ya que todos los principales navegadores admiten adecuadamente Web API (Polyfill eval\u00faa din\u00e1micamente el navegador actual seg\u00fan el encabezado User Agent y para los navegadores obsoletos genera funciones que implementan los m\u00e9todos, propiedades y API que faltan). <\/p>\n
Aquellos que todav\u00eda necesiten Polyfill pueden aprovechar las versiones de la biblioteca distribuidas por las empresas Fastly y Cloudflare, o pueden utilizar una servidor<\/a> copia local basada en el c\u00f3digo del repositorio con un fork creado por el autor original del proyecto. Los espejos se crearon en febrero debido a dudas sobre la fiabilidad del nuevo propietario dominio<\/a> polyfill.io. \u0411\u043e\u043b\u0435\u0435 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Polyfill \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043d\u043e\u0432\u044b\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u0443\u044e \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043c\u0435\u043d cdn.polyfill.io, \u0431\u044b\u043b \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, googie-anaiytics.com), \u0431\u0443\u043a\u043c\u0435\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0442\u043e\u0440\u044b \u0438 online-\u043a\u0430\u0437\u0438\u043d\u043e. \u041f\u0440\u043e\u0435\u043a\u0442 Polyfill \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0431\u044b\u043b \u043f\u0440\u043e\u0434\u0430\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116774","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47El cambio de propietario de la biblioteca Polyfill dio lugar a la inserci\u00f3n de c\u00f3digo malicioso en 110,000 sitios web | ProHoster","description":"M\u00e1s de 110,000 sitios web que utilizan la biblioteca de JavaScript abierta Polyfill para garantizar la compatibilidad con versiones anteriores de navegadores se convirtieron en v\u00edctimas de cambios maliciosos en el c\u00f3digo de la biblioteca por parte de un nuevo propietario.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/smena-vladelcza-biblioteki-polyfill-privela-k-podstanovke-vredonosnogo-koda-na-110-tysyach-sajtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043c\u0435\u043d\u0430 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Polyfill \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0411\u043e\u043b\u0435\u0435 110 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Polyfill \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0441\u0442\u0430\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0432\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043d\u043e\u0432\u044b\u043c.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/smena-vladelcza-biblioteki-polyfill-privela-k-podstanovke-vredonosnogo-koda-na-110-tysyach-sajtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-25T22:05:43+00:00","article:modified_time":"2024-06-25T22:05:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116774","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:13:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 02:56:19","updated":"2026-03-05 11:13:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/116774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=116774"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/116774\/revisions"}],"predecessor-version":[{"id":163256,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/116774\/revisions\/163256"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=116774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=116774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=116774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"