---
id: 10356
title: "Critical npm supply chain attack response – September 8, 2025"
source_domain: vercel.com
source_url: "https://vercel.com/blog/critical-npm-supply-chain-attack-response-september-8-2025"
published_at: "2025-09-08T00:00:00Z"
tags: ["supply-chain", "cloud-security", "incident-response", "web-security", "vercel"]
phying_url: "https://phying.com/item/10356"
lang: en
---

# Critical npm supply chain attack response – September 8, 2025

## Summary

How Vercel responded to the September 2025 npm supply chain attack on chalk, debug and 16 other packages. Incident timeline, impact analysis, and customer remediation.

## Intelligence Metadata

- **Sources:** vercel.com
- **Published:** 2025-09-08T00:00:00Z
- **Original:** https://vercel.com/blog/critical-npm-supply-chain-attack-response-september-8-2025
- **Phying News:** https://phying.com/item/10356