Vercel ChangelogNov 24, 2025, 1:00 PMAaron Brownimportant 75
Vercel 發布安全警示：應對 Shai-Hulud 2.0 供應鏈攻擊威脅
Original: Shai-Hulud 2.0 Supply Chain Compromise
Vercel has officially published a security advisory regarding the "Shai-Hulud 2.0 Supply Chain Compromise." "Shai-Hulud" refers to…
Vercel 於 Changelog 發布關於「Shai-Hulud 2.0」供應鏈妥協事件的安全公告。此類攻擊主要針對開源套件生態系（如 npm），可能影響部署於 Vercel 的應用程式。Vercel 已採取相應防護措施，並提醒開發者審查專案中的第三方依賴項目，鎖定套件版本，以確保建置流程與執行環境的安全。
Vercel has officially published a security advisory regarding the "Shai-Hulud 2.0 Supply Chain Compromise."
Full summary
Free shows the 3-line summary; Pro unlocks the full deep summary (~300 words) so you never have to click through.
See Pro plans →Want the original English / full article?
Read on Vercel Changelog →Summaries are AI-generated; the original article is authoritative.