Skip to content
Threat Feed

Product

Npm

1 brief RSS
critical advisory

Compromised intercom-client npm Package Exfiltrates Credentials

A compromised version (7.0.4) of the intercom-client npm package was published using a compromised developer account, containing obfuscated JavaScript that executed during installation to harvest and exfiltrate credentials from the environment, as part of the 'Mini Shai-Hulud' supply chain campaign.

intercom-client +5 supply-chain credential-theft npm
2r 2t