Specific details of the malicious code are downthread a bit: <a href="https://github.com/polyfillpolyfill/polyfill-service/issues/2873#issuecomment-2182491302">https://github.com/polyfillpolyfill/polyfill-service/issues/...</a>