npm/intercom-client: critical 9.3
Compromised version of intercom-client published to npm
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-54pg-9963-v8vg
- https://github.com/intercom/intercom-node/security/advisories/GHSA-54pg-9963-v8vg
- https://github.com/advisories/GHSA-4594-wxqv-j3pm
- https://github.com/intercom/intercom-node
- https://socket.dev/blog/intercom-s-npm-package-compromised-in-supply-chain-attack
- https://www.intercomstatus.com/us-hosting/incidents/01KQFN6VS6ARP1XBR1K1SBYY59
- https://www.wiz.io/blog/mini-shai-hulud-supply-chain-sap-npm
published · modified · JSON