Comment by hansmayer

"The incident originated with a compromise of Context.ai, a third-party AI tool used by a Vercel employee"

So - yes, actually.