Cybersecurity Watch: Recent Threat Trends on Vercel
If you deploy web apps using modern cloud platforms like Vercel, recent security trends offer an important wake-up call. Over the past year, threat actors have targeted both developer tools and hosting infrastructure in clever new ways.
Here are the three big security threats teams faced—and how to stay safe.
1. Supply-Chain Attacks on npm
In a major phishing campaign, attackers stole credentials from popular package maintainers. They injected wallet-draining malware into 18 widely used npm packages, including chalk and debug. This single attack impacted over 70 developer teams deploying on Vercel.
2. Framework Vulnerabilities
Security researchers uncovered critical vulnerabilities in React Server Components (RSC) and React 19 frameworks like Next.js. Under certain conditions, these flaws could allow hackers to run harmful code remotely or steal private source code.
3. Fake Subdomains Used for Phishing
Because *.vercel.app is a trusted web address, cybercriminals used free Vercel subdomains to host fake landing pages (like fake Adobe PDF readers). Unsuspecting users were tricked into downloading malware and remote access tools that bypassed basic email filters.
What You Should Do
-
Lock your dependencies: Use lockfiles (
package-lock.json) and pin exact package versions so unexpected updates don't break or compromise your site. - Update your frameworks: Apply patches to Next.js and React immediately when new security fixes are released.
- Stay alert: Treat links from free platform subdomains with the same caution as any unknown website.
Top comments (0)