Socket on Mythryl: “🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a…”

🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a malicious intercom/intercom-php@5.0.2 package artifact tied to this campaign. This is the third supply chain attack we've reported on today, and we're continuing to monitor the campaign: socket.dev/blog/mini-sh...

socket.devMini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP...Socket found a malicious Intercom PHP package on Packagist using Composer plugin execution to steal credentials and spread across ecosystems.

30/4/26, 10:15 pm2 reposts3 likes

Post