Securing the supply chain is one of our top priorities.
When npm packages get hijacked, our system blocks their deployment, protecting your code and secrets from exfiltration.
Vercel now automatically blocks known malicious npm packages in builds before their install scripts can run, no action required.
