Guillermo Rauch @rauchg

Securing the supply chain is one of our top priorities. When npm packages get hijacked, our system blocks their deployment, protecting your code and secrets from exfiltration. [引用 @vercel_dev]: Vercel now automatically blocks known malicious npm packages in builds before their install scripts can run, no action required. https://t.co/efmvd2PjjC