Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise

The Mini Shai-Hulud malware campaign has expanded from npm to Packagist, compromising the widely used intercom/intercom-php package with a credential-stealing, supply chain-propagating payload that executes during dependency installation, putting PHP projects and CI/CD environments at significant risk.