Robuta

Sponsor of the Day: Jerkmate
https://www.endorlabs.com/learn/shai-hulud-the-third-coming----inside-the-bitwarden-cli-2026-4-0-supply-chain-attack The Bitwarden CLI Supply Chain Attack: What Happened and What to Do | Blog | Endor Labs How attackers compromised Bitwarden's CLI and enlisted the help of AI coding agents to spread a worm and harvest developer secrets. supply chain attackblog endor labsbitwarden clihappened https://www.csoonline.com/article/4162865/bitwarden-cli-password-manager-trojanized-in-supply-chain-attack.html Bitwarden CLI password manager trojanized in supply chain attack | CSO Online Apr 23, 2026 - Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may be behind a spate of recent supply... supply chain attackbitwarden clipassword managercso onlinetrojanized https://www.ox.security/blog/shai-hulud-bitwarden-cli-supply-chain-attack/ Bitwarden CLI Compromised: Inside the Shai-Hulud Supply Chain Attack supply chain attackbitwarden clishai huludcompromisedinside https://www.mend.io/blog/compromised-bitwarden-cli-npm-worm-ai-poisoning/ Compromised Bitwarden CLI Poisons AI Assistants and Spreads as npm Worm Apr 23, 2026 - A fake @bitwarden/cli package published to npm combines credential harvesting, a self-spreading npm worm, and a first-of-its-kind AI assistant poisoning... compromised bitwarden cliai assistantsnpm wormpoisonsspreads https://phoenix.security/bitwarden-cli-backdoored-shai-hulud-returns-through-a-93-minute-npm-window/ Bitwarden CLI Backdoored: 93-Minute npm Supply Chain Attack Apr 24, 2026 - @bitwarden/cli 2026.4.0 was live on npm for 93 minutes with a credential stealer, npm worm, workflow injector, and AI assistant poisoning payload. IOCs and... npm supply chainbitwarden clibackdoored93minute https://piefed.0x0c.link/c/selfhosted@lemmy.world/p/1497/bitwarden-cli-distributed-through-npm-has-been-compromised-bitwarden-statement-on-ch Bitwarden CLI distributed through NPM has been compromised. Bitwarden Statement on Checkmarx Supply... bitwarden clicheckmarx supplydistributednpmcompromised https://www.xlzy3.com/news/?28894.html Bitwarden CLI 软件包遭遇 Checkmarx 供应链攻击_热门事件_值得一看_小罗资源网 bitwarden clicheckmarx https://next.ink/235095/la-saga-continue-un-paquet-npm-verole-de-bitwarden-cli-a-derobe-des-secrets/ La saga continue : un paquet NPM vérolé de Bitwarden CLI a dérobé des secrets - Next la sagabitwarden clides secretscontinueun https://it.slashdot.org/story/26/04/24/2032218/bitwarden-cli-is-the-next-compromise-in-checkmarx-supply-chain-campaign Bitwarden CLI Is the Next Compromise In Checkmarx Supply Chain Campaign - Slashdot Longtime Slashdot reader Himmy32 writes: Socket Security published an article on the compromise of the Bitwarden CLI client, which was pushed from Bitwarden's... checkmarx supply chainbitwarden clinextcompromisecampaign https://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious npm code checkmarx supply chainbitwarden clicompromisedongoingcampaign https://securityboulevard.com/2026/04/bitwarden-cli-compromise-linked-to-ongoing-checkmarx-supply-chain-campaign/ Bitwarden CLI Compromise Linked to Ongoing Checkmarx Supply Chain Campaign - Security Boulevard Apr 24, 2026 - While the attack on Bitwarden can be connected to the Checkmarx incident, it's unclear whether the same threat group is behind both. checkmarx supply chainbitwarden clisecurity boulevardcompromiselinked https://www.aikido.dev/blog/shai-hulud-npm-bitwarden-cli-compromise Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm Apr 23, 2026 - Malware found in @bitwarden/cli v2026.4.0 steals SSH keys, cloud secrets, and AI coding tool credentials, then spreads through victims' own npm packages.... compromised bitwarden clishai huludself propagatingnpm wormback https://www.itsecuritynews.info/the-butlerian-jihad-compromised-bitwarden-cli-deploys-npm-worm-poisons-ai-assistants-and-dumps-github-secrets/ The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps... Mend.io tracks TeamPCP’s latest supply chain attack. The post The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps... compromised bitwarden clinpm wormai assistantsbutlerianjihad https://dev.to/jtorchia/bitwarden-cli-comprometido-lo-que-un-supply-chain-attack-sobre-una-herramienta-que-uso-me-obliga-a-453d Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a... Apr 24, 2026 - Checkmarx detectó un supply chain attack sobre el ecosistema de Bitwarden CLI. Yo uso esa herramienta en producción. Esto no es un problema de Bitwarden — es... lo que unsupply chain attackbitwarden clisobre unacomprometido https://safedep.io/bitwarden-cli-supply-chain-compromise/ Bitwarden CLI Supply Chain Compromise - Real-time Open Source Software Supply Chain Security A technical writeup of the malicious `@bitwarden/cli@2026.4.0` release linked to the Checkmarx campaign. Covers the poisoned publish path, loader changes,... supply chain compromisereal time opensource software securitybitwarden cli https://stadt-bremerhaven.de/bitwarden-nutzer-aufgepasst-das-problem-mit-der-cli-version-2026-4-0/ Bitwarden-Nutzer aufgepasst: Das Problem mit der CLI-Version 2026.4.0 Kurze Info für alle, die den Passwortmanager Bitwarden nutzen. Während die meisten von euch wahrscheinlich mit der Browser-Erweiterung oder ... version 2026 4nutzer aufgepasstdas problemmit derbitwarden