‘No npm packages compromised,’ confirms Vercel after security attack

Wait 5 sec.

Despite the Google Workspace of Vercel's customers getting attacked, why is there no major loss reported?