Vercel: Context.ai OAuth compromise leads to employee Workspace takeover and decryption of customer env vars

What happened

• Vercel’s bulletin: an attacker compromised Context.ai, a third-party AI tool used by a Vercel employee, used it to take over the employee’s Google Workspace account and then Vercel account, moved into internal environments, and enumerated and decrypted customer environment variables. Only variables not marked “sensitive” were exposed. A limited subset of customers, later “a small number” more, were notified; no total disclosed. Vercel’s npm packages were not compromised.
• Root cause: OAuth grant to a third-party AI app (Context.ai, client ID 110671459871-30f1spbu0hptbs60cb4vsmv79i7bbvqj.apps.googleusercontent.com) that was itself breached.
• Vercel calls the attacker “highly sophisticated” and does not name it; a forum actor claiming ShinyHunters affiliation advertised the data (secondary).
• Mandiant engaged; incident closed 16 Oct 2026 with remediation complete.

Sources

• https://vercel.com/kb/bulletin/vercel-april-2026-security-incident
• https://securityboulevard.com/2026/04/vercel-confirms-breach-as-hackers-claim-to-be-selling-stolen-data/

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.