Vercel

An attacker compromised a Vercel employee's Google Workspace account through an OAuth token stolen from Context.ai, which was initially breached via Lumma Stealer malware disguised as Roblox cheats. The attacker then accessed Vercel internal environments and customer credentials. Vercel notified affected customers and published indicators of compromise.