Critical Vulnerability in intercom-intercom-embed: Malicious Code Detected
Summary
MAL-2025-5419: Malicious code in intercom-intercom-embed (npm). Affects intercom-intercom-embed versions >= 10.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The intercom-intercom-embed package is a JavaScript library used for integrating Intercom's customer messaging platform into web applications. It allows developers to embed Intercom's chat and messaging features seamlessly. However, this package has been found to communicate with a domain associated with malicious activity, raising concerns about the security and integrity of applications utilizing it.
Vulnerability Detail
The vulnerability identified in the intercom-intercom-embed package stems from its communication with a domain linked to malicious activities. This could potentially lead to unauthorized access, data breaches, or the execution of harmful scripts within applications that rely on this package. The issue was introduced in version 10.0.0, making all subsequent versions vulnerable until a patch is applied.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall intercom-intercom-embedIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If an immediate update is not feasible, consider removing the intercom-intercom-embed package temporarily from your project until a secure version is available. This can be done using the command: npm uninstall intercom-intercom-embed.
Conclusion
The intercom-intercom-embed package has a critical vulnerability that can expose applications to malicious activities. It is essential to update the package to a secure version or implement workarounds to mitigate risks. Regular monitoring for vulnerabilities using tools like Vulert can enhance application security.
See every vulnerability recorded for intercom-intercom-embed →
FAQ
It is a JavaScript library used to integrate Intercom's messaging features into web applications.
The vulnerability involves the package communicating with a malicious domain, posing risks of unauthorized access and data breaches.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Consider uninstalling the intercom-intercom-embed package until a secure version is available.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just package-lock.json, ensuring your application remains secure.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
