November 2, 2026Infrastructure

Vercel builds now block known malicious npm packages before install scripts run

Vercel says its builds now automatically block known malicious npm packages before their install scripts can run. No action is needed from users. The details are in Vercel's changelog entry.

Sources

Vercel now automatically blocks known malicious npm packages in builds before their install scripts can run, no action required.X · 2 comments

Get news like this as a push.

AI Tracker alerts you when something changes for the tools you use.

Get the app