"Sansec said it found one strain of Malware using polyfill[.io] to redirect mobile users to a sports betting site using a fake Google Analytics domain"

https://therecord.media/polyfill-cloudflare-trade-barbs-supply-chain-attack