Malicious versions reported for this package
- MAL-2026-3204 — 7.0.4 · Apr 30, 2026
1 result · Feed
-
Critical 9.3
Compromised version of intercom-client published to npm
### Impact On April 30, 2026, version 7.0.4 of intercom-client was published to npm using credentials obtained from a compromised developer account. This version was not produced by Intercom's build pipeline. The malicious version contained an obfuscated Java…