Shai-Halud Supply Chain Campaign — Expanded Impact & Vercel Response

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 16 Sept 2025, 13:00 UTC

Summary Impact to Vercel Customers What We Did What We’re Watching & Doing Recommendations for Vercel Users Timeline References Shai-Halud chalk debug ansi-styles Thesupply chain campaign has escalated. What began with the Qix compromise affecting ~18 core npm packages (,,, etc.) has since spread…

Sources

• T1Shai-Halud Supply Chain Campaign — Expanded Impact & Vercel ResponseVercel (blog + changelog)16 Sept 2025, 13:00