> Polyfill.io has been serving malware for months via its CDN, after the project's open source maintainer sold the service to a company based in China. Nobody

> Polyfill.io has been serving malware for months via its CDN, after the project's open source maintainer sold the service to a company based in China. Nobody could have predicted this /s