{"action":"No fix published. Pin and monitor.","affected":[],"component":"intercom/intercom-php","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-gr3r-crp5-qrrm","id":"tcs_01M5KF32662AJAZ1GQ0137G22R","modified_at":"2026-05-07T17:05:09.385592Z","published_at":"2026-05-07T16:48:41Z","references":["https://osv.dev/vulnerability/GHSA-gr3r-crp5-qrrm","https://github.com/intercom/intercom-php/security/advisories/GHSA-gr3r-crp5-qrrm","https://github.com/intercom/intercom-php","https://www.intercomstatus.com/us-hosting/incidents/01KQFN6VS6ARP1XBR1K1SBYY59","https://www.wiz.io/blog/mini-shai-hulud-supply-chain-sap-npm"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-gr3r-crp5-qrrm","url":"https://osv.dev/vulnerability/GHSA-gr3r-crp5-qrrm"}],"summary":"Compromised tag of intercom-php published via GitHub"}