tennoseremel
polyfill.io was sold to a Chinese company and inserts malware.
https://sansec.io/research/polyfill-supply-chain-attack
https://oisaur.com/@renchap/112679062235365025