Malicious versions reported for this package
- MAL-2026-3637 — 5.0.2 · May 13, 2026
1 result · Feed
-
Critical 9.3
Compromised tag of intercom-php published via GitHub
### Impact On April 30, 2026, a malicious commit was pushed to the intercom/intercom-php repository and tagged as version 5.0.2, using a compromised service account (github-management-service). This occurred as part of the same supply chain attack that affect…