HOW TO HACK DISCORD, VERCEL AND MORE WITH ONE EASY TRICK - EVA'S SITE

Summary from the TLDR InfoSec newsletter

Mintlify lets customers write pages in MDX, but processes that content in a way that allows attackers to run arbitrary JavaScript on the server during build. This means an attacker can take over the build environment, poison cached pages, and inject malicious scripts into many companies' docs, including big names like Discord and Vercel. Because some docs were served from the same domain or path as real apps, those scripts could steal auth tokens or perform actions as logged-in users.