TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8910
@thehackernews
The Hacker News
Post content
Post content
🤦♂️ Another supply chain hit. intercom-client npm package compromised → Malicious preinstall hook executes on install → Credentials targeted across dev & CI/CD Linked to ongoing Mini Shai-Hulud campaign. Read this update here: https://thehackernews.com/2026/04/pytorch-lightning-compromised-in-pypi.html#intercom-npm-package-compromised-as-part-of-mini-shai-hulud