← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise
WHITE Tr1sa111 2026-05-05 Modified: 2026-05-05
9
IOCs
LOW VOLUME
credential theftmini shai-huludsupply chain attackintercompackagist compromise
MITRE ATT&CK & Malware Families
MALWARE FAMILIES
router_runtime.js
Indicators of Compromise (5 / 9 total)
All FileHash-SHA1 FileHash-SHA256 URL hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 50212a875643520353df158196b9b3be4595094125ad8d2d2c48bdd9cb04ce1f — 2026-05-05
FileHash-SHA256 66664a49edbcee0ed0d8365839707916e92d3aa06e7f26f33c9dcc58e5fc1ef3 — 2026-05-05
FileHash-SHA256 832a976d1a8d54e296e8479aedbd89fa24baa02b8409a78bf06d4d03340881bd — 2026-05-05
FileHash-SHA256 907aec5b1288057a3e0885226918b6930a62a0f348ce23de026a683238c7903e — 2026-05-05
FileHash-SHA256 b084743bd16043461e68b604dde80a8b386b405eae6f66c1103fb4fd6831d4a7 — 2026-05-05
References (1)
↗ https://socket.dev/blog/mini-shai-hulud-packagist-malicious-intercom-php-package-compromise