Shai-Halud Supply Chain Campaign — Vercel Response & Enhanced Protections

Summary

Impact to Vercel Customers

What We Did

What We’re Watching & Doing

Recommendations for Vercel Users

Timeline

References

The supply chain campaign has escalated. What began with the Qix compromise affecting ~18 core npm packages (, , , etc.) has since spread:Shai-Haludchalkdebugansi-styles

Read more

• Over 40 additional packages attacked via the Tinycolor “worm” vector.

• The CrowdStrike / namespace was also compromised, with multiple trojanized releases.crowdstrike-publisher

• The DuckDB maintainer account () published malicious versions matching the same wallet-drainer malware used in the Qix incidents. No Vercel customers were impacted in that DuckDB subset.duckdb_admin

• We identified Vercel customer projects whose builds depended (directly or transitively) on the compromised package versions.a small set of 10

• Impacted customers have been notified and provided with project-level guidance.

• In the DuckDB incident, no Vercel customer build was affected.

• Working closely with npm, open-source maintainers, and ecosystem security partners to track any further spread of Shai-Halud.

• Enhancing our supply chain defenses so that

  deployments on Vercel remain secure by default

  : stricter policies on lifecycle/postinstall scripts, lockfile hygiene, and registry validation.

• Tightening internal CI/CD controls and developer tooling to catch suspicious package behavior early.

• For teams using pnpm, consider enabling the new setting introduced in pnpm 10.16 to delay dependency updates (e.g., 24 hours). This helps reduce risk from compromised versions that are discovered and removed shortly after publishing.minimumReleaseAge

• Audit your dependencies (direct & transitive) to check for packages from these affected namespaces.

• Rebuild with pinned safe versions and clean lockfiles ().pnpm ci

• Rotate any npm / GitHub / CI/CD tokens that may have been used in environments where compromised dependencies were present.

• Inspect GitHub repos for unauthorized workflows or unexpected additions..github/workflows

• Enforce least privilege (especially in automated workflows), and limit lifecycle script permissions.

• September 8, 2025

  — Qix / Tinycolor / core package compromise discovered.

• September 9, 2025

  — DuckDB issue identified.

• September 15-16, 2025

  — CrowdStrike / Tinycolor “worm” style propagation detected; Vercel detection expanded.

• September 16, 2025

  — Customer notifications, cache purges, safe rebuilds underway.

• Socket: Tinycolor supply chain attack affects 40+ packages

• Socket: Ongoing supply chain attack targets CrowdStrike npm packages

• Aikido Security: Qix / core package analysis

• Nx Advisory: s1ngularity attack