The Roblox-to-Vercel Kill Chain — How One OAuth Token Breached a Platform Serving Millions
One Lumma Stealer download by a Context.ai employee became a kill chain that reached Vercel's internal environment through a compromised OAuth token — demonstrating that AI productivity tools with broad OAuth scopes create a supply-chain exposure most enterprises have not governed.
