---
title: "PolyFill Vulnerability is WILD - YouTube"
description: "!https://www.youtube.com/watch?si=6NK4iCu1b1rCDo7a&t=555&v=mmlHQyMOK7Y&feature=youtu.be"
date: 2024-06-29
published: true
tags:
  - dev
  - infra
  - open-source
  - thought
template: link
---


![https://www.youtube.com/watch?si=6NK4iCu1b1rCDo7a&t=555&v=mmlHQyMOK7Y&feature=youtu.be](/static/https://www.youtube.com/watch?si=6NK4iCu1b1rCDo7a&t=555&v=mmlHQyMOK7Y&feature=youtu.be)

Damn, supply chain vector attacks are wild. Random guy in Primes stream was getting $40k offers to buy their open source project while in university and they have never made anything from it.  What a social engineering attack this is.  It would be so easy to make it look like a good deal and that the package was going to a good new owner who has real resources to maintain it.