Reports surfaced that Vercel has been compromised. If you are hosting your projects on Vercel, yourReports surfaced that Vercel has been compromised. If you are hosting your projects on Vercel, your
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
sameer's avatar
sameer sajid
• Apr 25
Reports surfaced that Vercel has been compromised.
If you are hosting your projects on Vercel, your API keys, Database credentials, and Environment Tokens could be at risk. Rumors suggest ShinyHunters is already involved.
DO THESE 5 THINGS IMMEDIATELY:
Rotate All API Keys: Immediately change keys for Stripe, AWS, OpenAI, or any 3rd party services.
Reset Database Passwords: Change your DB credentials and update your env variables.
Check Edge Config & Middleware: Ensure no unauthorized scripts or redirects were added.
Audit Team Access: Review your Vercel team members and remove any suspicious or old accounts.
Enable 2FA: If you haven't already, enable Two-Factor Authentication on your Vercel and GitHub accounts.
Don't wait for a "final report." Security is better than regret. 🛡️
Post image
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started