The Anatomy of the Vercel Hack
A Vercel employee installed Contacts.ai via Google OAuth. That app had been compromised when one of its own employees downloaded a Roblox cheat that contained a backdoor. The attacker escalated privileges inside Vercel, then found database secrets stored in clear text — accessing every customer's data.
