SCSK Website Hit by Suspicious Authentication Prompt Attack via Polyfill.io

This incident highlights a critical supply chain security risk: third-party services embedded in websites can become attack vectors. Organizations relying on external polyfill libraries should audit their dependencies immediately. For users, this underscores the importance of password hygiene and the need to change credentials if compromised, especially across multiple services. The incident demonstrates how attackers exploit trusted integrations to harvest credentials at scale.