Pulse Detail — Threat Intelligence

PULSE NAME

Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise

WHITE Tr1sa111 2026-05-05 Modified: 2026-05-05

IOCs

LOW VOLUME

MITRE ATT&CK & Malware Families

MALWARE FAMILIES

router_runtime.js

Indicators of Compromise (1 / 9 total)

All FileHash-SHA1 FileHash-SHA256 URL hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	https://zero.masscan.cloud:443/v1/telemetry	—	2026-05-05

References (1)