'No npm packages compromised,' confirms Vercel after security attack.

{
  "signal_id": "4ce68999-e29a-453e-a256-6007f7c50145",
  "signal_type": "news",
  "signal_subtype": "partners_with",
  "detected_at": "2026-04-22T00:00:30+00:00",
  "company": {
    "name": "Vercel",
    "domain": "vercel.com"
  },
  "data": {
    "url": "https://ambcrypto.com/no-npm-packages-compromised-confirms-vercel-after-security-attack",
    "title": "'No npm packages compromised,' confirms Vercel after security attack.",
    "excerpt": "'No npm packages compromised,' confirms Vercel after security attack.\n\nDespite the Google Workspace of Vercel's customers getting attacked, why is there no major loss reported?\n\nUpdated 20:00 EDT April 21, 2026\n\nVercel, a Web3 infrastructure provider, has finally provided a breather to the crypto community as it announced that no Node Package Manager (npm) package was affected in the attack.\n\nFor context, npm is like an app store for code, facilitating speedy development by enabling managing and reusing code instead of redoing everything.\n\nThe confirmation on this was made by the Vercel security team in collaboration with GitHub, Microsoft, npm, and Socket.\n\nThe Vercel attack briefly.\n\nThis disclosure comes on the heels of a bunch of Vercel's customers credentials getting attacked as the hacker got access to customers's API keys. Though the attack was initially aimed at the Context.ai.\n\nThe \"keys\" (OAuth tokens), however, attached to the AI tool gave the attacker access to the employee's Google Workspace. And Vercel, being one of the organizations of the OAuth app, got dragged in.\n\nSteps taken by Vercel.\n\nDespite npm being safe from getting attacked, Vercel didn't have a laid-back attitude.\n\nThe Web3 infrastructure provider went ahead and added another layer of security with a minimum 2-step authentication method. The first was an authenticator app configuration, and the other...",
    "summary": "Vercel Inc. partners with GitHub.",
    "category": "partners_with",
    "found_at": "2026-04-22T00:00:30Z",
    "planning": false,
    "image_url": "https://ambcrypto.com/wp-content/uploads/2026/04/FI_QB.CN_VERCEL_21-04-2026.webp",
    "confidence": 0.5395,
    "published_at": "2026-04-22T00:00:30Z",
    "article_sentence": "The confirmation on this was made by the Vercel security team in collaboration with GitHub, Microsoft, npm, and Socket."
  }
}

curl https://signals.autobound.ai/v1/signals/4ce68999-e29a-453e-a256-6007f7c50145 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"vercel.com","limit":20}'