[luhn]

Specific details of the malicious code are downthread a bit: https://github.com/polyfillpolyfill/polyfill-service/issues/...

[radicality]

So it ends up redirecting to some other malicious domain? Do we know where, and what kind of payload that domain might deliver?