diff --git a/mixins.yml b/mixins.yml
index 3858204407c02d7ce3e9700610f2409b3a955731..721edc379b3e7fe32454d97e4ca32fec88da687b 100644
--- a/mixins.yml
+++ b/mixins.yml
@@ -70,6 +70,9 @@ stages:
     - sed -i "s/DDQG-unsupported-drupal-views_menu_children_filter-3.0.0.0-RC2/DDQG-unsupported-drupal-views_menu_children_filter-3.0.0.0-RC4/g" composer.json
     - sed -i "s/DDQG-unsupported-drupal-login_destination-2.0.0.0-beta6/DDQG-unsupported-drupal-login_destination-2.0.0.0-beta7/g" composer.json
     #- sed -i "s/###/###/g" composer.json
+    # Remove 2 packages that may be impacted by the polyfill backdoor.
+    - sed -i "s/\"algolia.places\": \"https:\/\/registry.npmjs.org\/places.js\/-\/places.js-1.19.0.tgz\",//g" composer.json
+    - sed -i "s/\"choices\": \"https:\/\/github.com\/Choices-js\/Choices\/archive\/refs\/tags\/v9.0.1.zip\",//g" composer.json
     # Finally!!! Normalize composer.json by pretty printing it to ensure consistent structure.
     # Disabled for now, since this sometimes creates an empty file: cat composer.json | jq -M . | tee composer.json >/dev/null