Vercel CEO Reports Broader Malware Distribution Following Security Investigation, API Keys Targeted

Gate News message, April 23 — Vercel CEO Guillermo Rauch announced that the company has completed an in-depth security investigation spanning nearly 1 petabyte of complete Vercel network and API logs, extending well beyond the initial Context.ai account breach.

The investigation revealed that attackers operated on a broader scale than initially identified and have distributed malware across a wider range to steal account credentials from Vercel and other platforms. Once attackers obtain API keys, they systematically enumerate non-sensitive environment variables. Vercel has strengthened collaboration with industry partners including Microsoft, AWS, and Wiz to protect the broader internet ecosystem, and has notified other suspected victims with recommendations to rotate credentials immediately and implement security best practices.