Vercel Breach: Forgotten AI App Trial Led to Supply Chain Attack

The recent Vercel breach highlights a critical cybersecurity vulnerability. It began with an employee who allegedly contracted an infostealer while searching for Roblox cheats. This infostealer harvested stored OAuth tokens. One token belonged to a Vercel employee who had used a deprecated AI product called Context.ai months earlier. This single OAuth grant gave attackers access to internal dashboards, employee records, API keys, NPM tokens, and GitHub tokens. Vercel was never a customer of Context.ai. The grant persisted even after the employee stopped using the trial, creating an invisible bridge into their system. This type of "shadow AI" exposure is a structural failure where AI apps, designed for workflow automation, can reach into a user's other applications via OAuth. This incident shows how forgotten app trials can lead to significant supply chain attacks.