It's a known malicious actor.

https://www.bleepingcomputer.com/news/security/polyfillio-ja...