Pulse Detail — Threat Intelligence

PULSE NAME

Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise

WHITE Tr1sa111 2026-05-05 Modified: 2026-05-05

IOCs

LOW VOLUME

MITRE ATT&CK & Malware Families

MALWARE FAMILIES

router_runtime.js

Indicators of Compromise (2 / 9 total)

All FileHash-SHA1 FileHash-SHA256 URL hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
FileHash-SHA1	e69bf4b3e84e7951a7b4ded8fee8822c57630cf8	—	2026-05-05
FileHash-SHA1	e8a812c5ea7d8c7ed642b0d82754ced6a99025b0	—	2026-05-05

References (1)