Malicious Intercom PHP Package Spreads Mini Shai-Hulud Attack to Packagist via Composer Plugin

intercom/intercom-php 5.0.2 was compromised and converted into a Composer plugin that exfiltrates credentials at install time, extending the Mini Shai-Hulud campaign to PHP.