Intercom-client NPM package and lightning PyPI packages compromised

OpenSourceMalware.com· May 1, 2026 · 12:35 AM UTC · 0 reactions · 0 comments · 2 views

TeamPCP has delivered another software supply chain attack that they are calling mini shai-hulud. This campaign borrows ts best trick from North Korean campaigns like PolinRider and Contagious Interview

Original article

Opensourcemalware · OpenSourceMalware.com

Read full at Opensourcemalware →

Anonymous · no account needed

Discussion

0 comments

Intercom-client NPM package and lightning PyPI packages compromised

Discussion

More from Opensourcemalware