Post #8911

⚠️ Update: Mini Shai-Hulud is spreading across ecosystems. → intercom-client (npm) and intercom-php (Packagist) compromised → Install-time hooks deploy credential stealer Attack targets GitHub tokens, cloud creds, SSH keys, Kubernetes, Vault, Docker, and .env files. Read: https://thehackernews.com/2026/04/pytorch-lightning-compromised-in-pypi.html#intercom-npm-and-packagist-package-compromised-as-part-of-mini-shai-hulud Campaign linked to TeamPCP and earlier Lightning compromise.