
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
intercom-client
Advanced tools
The Intercom TypeScript library provides convenient access to the Intercom APIs from TypeScript.
The TypeScript SDK has been updated to support latest API version (2.11).
npm i -s intercom-client
A full reference for this library is available here.
Instantiate and use the client with the following:
import { IntercomClient } from "intercom-client";
const client = new IntercomClient({ token: "YOUR_TOKEN" });
await client.aiContent.createContentImportSource({
url: "https://www.example.com"
});
The SDK exports all request and response types as TypeScript interfaces. Simply import them with the following namespace:
import { Intercom } from "intercom-client";
const request: Intercom.ConfigureAwayAdminRequest = {
...
};
When the API returns a non-success status code (4xx or 5xx response), a subclass of the following error will be thrown.
import { IntercomError } from "intercom-client";
try {
await client.aiContent.createContentImportSource(...);
} catch (err) {
if (err instanceof IntercomError) {
console.log(err.statusCode);
console.log(err.message);
console.log(err.body);
console.log(err.rawResponse);
}
}
List endpoints are paginated. The SDK provides an iterator so that you can simply loop over the items:
import { IntercomClient } from "intercom-client";
const client = new IntercomClient({ token: "YOUR_TOKEN" });
const pageableResponse = await client.articles.list();
for await (const item of pageableResponse) {
console.log(item);
}
// Or you can manually iterate page-by-page
let page = await client.articles.list();
while (page.hasNextPage()) {
page = page.getNextPage();
}
// You can also access the underlying response
const response = page.response;
If you would like to send additional headers as part of the request, use the headers request option.
const response = await client.aiContent.createContentImportSource(..., {
headers: {
'X-Custom-Header': 'custom value'
}
});
If you would like to send additional query string parameters as part of the request, use the queryParams request option.
const response = await client.aiContent.createContentImportSource(..., {
queryParams: {
'customQueryParamKey': 'custom query param value'
}
});
The SDK is instrumented with automatic retries with exponential backoff. A request will be retried as long as the request is deemed retryable and the number of retry attempts has not grown larger than the configured retry limit (default: 2).
A request is deemed retryable when any of the following HTTP status codes is returned:
Use the maxRetries request option to configure this behavior.
const response = await client.aiContent.createContentImportSource(..., {
maxRetries: 0 // override maxRetries at the request level
});
The SDK defaults to a 60 second timeout. Use the timeoutInSeconds option to configure this behavior.
const response = await client.aiContent.createContentImportSource(..., {
timeoutInSeconds: 30 // override timeout to 30s
});
The SDK allows users to abort requests at any point by passing in an abort signal.
const controller = new AbortController();
const response = await client.aiContent.createContentImportSource(..., {
abortSignal: controller.signal
});
controller.abort(); // aborts the request
The SDK provides access to raw response data, including headers, through the .withRawResponse() method.
The .withRawResponse() method returns a promise that results to an object with a data and a rawResponse property.
const { data, rawResponse } = await client.aiContent.createContentImportSource(...).withRawResponse();
console.log(data);
console.log(rawResponse.headers['X-My-Header']);
The SDK supports logging. You can configure the logger by passing in a logging object to the client options.
import { IntercomClient, logging } from "intercom-client";
const client = new IntercomClient({
...
logging: {
level: logging.LogLevel.Debug, // defaults to logging.LogLevel.Info
logger: new logging.ConsoleLogger(), // defaults to ConsoleLogger
silent: false, // defaults to true, set to false to enable logging
}
});
The logging object can have the following properties:
level: The log level to use. Defaults to logging.LogLevel.Info.logger: The logger to use. Defaults to a logging.ConsoleLogger.silent: Whether to silence the logger. Defaults to true.The level property can be one of the following values:
logging.LogLevel.Debuglogging.LogLevel.Infologging.LogLevel.Warnlogging.LogLevel.ErrorTo provide a custom logger, you can pass in an object that implements the logging.ILogger interface.
Here's an example using the popular winston logging library.
import winston from 'winston';
const winstonLogger = winston.createLogger({...});
const logger: logging.ILogger = {
debug: (msg, ...args) => winstonLogger.debug(msg, ...args),
info: (msg, ...args) => winstonLogger.info(msg, ...args),
warn: (msg, ...args) => winstonLogger.warn(msg, ...args),
error: (msg, ...args) => winstonLogger.error(msg, ...args),
};
Here's an example using the popular pino logging library.
import pino from 'pino';
const pinoLogger = pino({...});
const logger: logging.ILogger = {
debug: (msg, ...args) => pinoLogger.debug(args, msg),
info: (msg, ...args) => pinoLogger.info(args, msg),
warn: (msg, ...args) => pinoLogger.warn(args, msg),
error: (msg, ...args) => pinoLogger.error(args, msg),
};
The SDK works in the following runtimes:
The SDK provides a way for you to customize the underlying HTTP client / Fetch function. If you're running in an unsupported environment, this provides a way for you to break glass and ensure the SDK works.
import { IntercomClient } from "intercom-client";
const client = new IntercomClient({
...
fetcher: // provide your implementation here
});
While we value open-source contributions to this SDK, this library is generated programmatically. Additions made directly to this library would have to be moved over to our generation code, otherwise they would be overwritten upon the next generated release. Feel free to open a PR as a proof of concept, but know that we will not be able to merge it as-is. We suggest opening an issue first to discuss with us!
On the other hand, contributions to the README are always very welcome!
The hubspot-api package provides a client for interacting with HubSpot's API. Similar to intercom-client, it allows for managing contacts, sending messages, and handling conversations. However, it is specific to HubSpot's CRM and marketing tools.
The zendesk-node-api package is a client for the Zendesk API. It offers functionalities for managing tickets, users, and other support-related tasks. While it shares some similarities with intercom-client in terms of user and conversation management, it is tailored for Zendesk's customer support platform.
The freshdesk-api package provides a client for interacting with Freshdesk's API. It allows for managing tickets, contacts, and conversations, similar to intercom-client. However, it is designed specifically for Freshdesk's customer support and helpdesk services.
FAQs
Official Node bindings to the Intercom API
The npm package intercom-client receives a total of 265,674 weekly downloads. As such, intercom-client popularity was classified as popular.
We found that intercom-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.