Vercel's security breach started with malware disguised as Roblox cheats