Provider changes/VercelVERCEL · VERIFIED CHANGE

Vercel: security change

Vercel now automatically checks npm packages on all plans to prevent malicious install scripts in blocked package versions from running.

Verified Nov 2, 20262 official sources

Mentioned in the evidence

Vercel product changelog (changelog) ↗
Automatic checks on all plans help prevent malicious install scripts in blocked npm package versions from running.
Vercel product changelog (changelog) ↗
Blocking malicious npm packages before and during installation

This is a global change, verified against Vercel’s own sources. It is not an assessment of your systems or your impact.

Auterim checks your confirmed dependencies and can verify repository references when GitHub is connected.