--- title: Suspicious Polyfill login prompts pop up on Toshiba,... description: Toshiba and Muji warned users about suspicious login pop-ups appearing on their websites, generated by the polyfill[.]io domain. The issue traces back to the... canonical: https://daily.dev/posts/suspicious-polyfill-login-prompts-pop-up-on-toshiba-muji-websites-ppl2wcqf7 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Suspicious Polyfill login prompts pop up on Toshiba, Muji websites | daily.dev og:description: Toshiba and Muji warned users about suspicious login pop-ups appearing on their websites, generated by the polyfill[.]io domain. The issue traces back to the... og:url: https://daily.dev/posts/suspicious-polyfill-login-prompts-pop-up-on-toshiba-muji-websites-ppl2wcqf7 og:image: https://api.daily.dev/og/posts/ppl2wCqf7.png og:image:alt: Suspicious Polyfill login prompts pop up on Toshiba, Muji websites og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Suspicious Polyfill login prompts pop up on Toshiba, Muji websites **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Toshiba and Muji warned users about suspicious login pop-ups appearing on their websites, generated by the polyfill[.]io domain. The issue traces back to the 2024 supply chain attack when the domain was purchased by a Chinese entity and injected malicious scripts into over 100,000 websites. Although the domain was later deactivated, some sites never fully removed the Polyfill code. Starting in late May 2026, polyfill[.]io became active again and began responding with HTTP 401 authentication requests, causing browsers to display login prompts. Other affected companies include Zojirushi, FiNC Technologies, and Samsung Smart TV websites. No confirmed credential theft has been reported, but users are advised to avoid entering credentials in unexpected authentication prompts. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Job scam uses fake Google Forms site to harvest Google logins](https://daily.dev/posts/job-scam-uses-fake-google-forms-site-to-harvest-google-logins-35krq5h0d) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#javascript](https://daily.dev/tags/javascript), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/suspicious-polyfill-login-prompts-pop-up-on-toshiba-muji-websites-ppl2wcqf7) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Suspicious Polyfill login prompts pop up on Toshiba, Muji websites","url":"https://daily.dev/posts/suspicious-polyfill-login-prompts-pop-up-on-toshiba-muji-websites-ppl2wcqf7","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/suspicious-polyfill-login-prompts-pop-up-on-toshiba-muji-websites-ppl2wcqf7"},"datePublished":"2026-06-05T21:59:49.794Z","dateModified":"2026-08-24T07:07:35.207Z","description":"Toshiba and Muji warned users about suspicious login pop-ups appearing on their websites, generated by the polyfill[.]io domain. The issue traces back to the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/43ab7d9b00fc3ed3dd91c688267c99ed?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/43ab7d9b00fc3ed3dd91c688267c99ed?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/suspicious-polyfill-login-prompts-pop-up-on-toshiba-muji-websites-ppl2wcqf7","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,javascript,phishing","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Suspicious Polyfill login prompts pop up on Toshiba, Muji websites"}]} ```