Sponsor of the Day:
Jerkmate
https://www.endorlabs.com/learn/shai-hulud-the-third-coming----inside-the-bitwarden-cli-2026-4-0-supply-chain-attack
The Bitwarden CLI Supply Chain Attack: What Happened and What to Do | Blog | Endor Labs
How attackers compromised Bitwarden's CLI and enlisted the help of AI coding agents to spread a worm and harvest developer secrets.
supply chain attackblog endor labsbitwarden clihappened
https://www.csoonline.com/article/4162865/bitwarden-cli-password-manager-trojanized-in-supply-chain-attack.html
Bitwarden CLI password manager trojanized in supply chain attack | CSO Online
Apr 23, 2026 - Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may be behind a spate of recent supply...
supply chain attackbitwarden clipassword managercso onlinetrojanized
https://www.ox.security/blog/shai-hulud-bitwarden-cli-supply-chain-attack/
Bitwarden CLI Compromised: Inside the Shai-Hulud Supply Chain Attack
supply chain attackbitwarden clishai huludcompromisedinside
https://www.mend.io/blog/compromised-bitwarden-cli-npm-worm-ai-poisoning/
Compromised Bitwarden CLI Poisons AI Assistants and Spreads as npm Worm
Apr 23, 2026 - A fake @bitwarden/cli package published to npm combines credential harvesting, a self-spreading npm worm, and a first-of-its-kind AI assistant poisoning...
compromised bitwarden cliai assistantsnpm wormpoisonsspreads
https://phoenix.security/bitwarden-cli-backdoored-shai-hulud-returns-through-a-93-minute-npm-window/
Bitwarden CLI Backdoored: 93-Minute npm Supply Chain Attack
Apr 24, 2026 - @bitwarden/cli 2026.4.0 was live on npm for 93 minutes with a credential stealer, npm worm, workflow injector, and AI assistant poisoning payload. IOCs and...
npm supply chainbitwarden clibackdoored93minute
https://piefed.0x0c.link/c/selfhosted@lemmy.world/p/1497/bitwarden-cli-distributed-through-npm-has-been-compromised-bitwarden-statement-on-ch
Bitwarden CLI distributed through NPM has been compromised. Bitwarden Statement on Checkmarx Supply...
bitwarden clicheckmarx supplydistributednpmcompromised
https://www.xlzy3.com/news/?28894.html
Bitwarden CLI 软件包遭遇 Checkmarx 供应链攻击_热门事件_值得一看_小罗资源网
bitwarden clicheckmarx
https://next.ink/235095/la-saga-continue-un-paquet-npm-verole-de-bitwarden-cli-a-derobe-des-secrets/
La saga continue : un paquet NPM vérolé de Bitwarden CLI a dérobé des secrets - Next
la sagabitwarden clides secretscontinueun
https://it.slashdot.org/story/26/04/24/2032218/bitwarden-cli-is-the-next-compromise-in-checkmarx-supply-chain-campaign
Bitwarden CLI Is the Next Compromise In Checkmarx Supply Chain Campaign - Slashdot
Longtime Slashdot reader Himmy32 writes: Socket Security published an article on the compromise of the Bitwarden CLI client, which was pushed from Bitwarden's...
checkmarx supply chainbitwarden clinextcompromisecampaign
https://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious npm code
checkmarx supply chainbitwarden clicompromisedongoingcampaign
https://securityboulevard.com/2026/04/bitwarden-cli-compromise-linked-to-ongoing-checkmarx-supply-chain-campaign/
Bitwarden CLI Compromise Linked to Ongoing Checkmarx Supply Chain Campaign - Security Boulevard
Apr 24, 2026 - While the attack on Bitwarden can be connected to the Checkmarx incident, it's unclear whether the same threat group is behind both.
checkmarx supply chainbitwarden clisecurity boulevardcompromiselinked
https://www.aikido.dev/blog/shai-hulud-npm-bitwarden-cli-compromise
Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm
Apr 23, 2026 - Malware found in @bitwarden/cli v2026.4.0 steals SSH keys, cloud secrets, and AI coding tool credentials, then spreads through victims' own npm packages....
compromised bitwarden clishai huludself propagatingnpm wormback
https://www.itsecuritynews.info/the-butlerian-jihad-compromised-bitwarden-cli-deploys-npm-worm-poisons-ai-assistants-and-dumps-github-secrets/
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps...
Mend.io tracks TeamPCP’s latest supply chain attack. The post The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps...
compromised bitwarden clinpm wormai assistantsbutlerianjihad
https://dev.to/jtorchia/bitwarden-cli-comprometido-lo-que-un-supply-chain-attack-sobre-una-herramienta-que-uso-me-obliga-a-453d
Bitwarden CLI comprometido: lo que un supply chain attack sobre una herramienta que uso me obliga a...
Apr 24, 2026 - Checkmarx detectó un supply chain attack sobre el ecosistema de Bitwarden CLI. Yo uso esa herramienta en producción. Esto no es un problema de Bitwarden — es...
lo que unsupply chain attackbitwarden clisobre unacomprometido
https://safedep.io/bitwarden-cli-supply-chain-compromise/
Bitwarden CLI Supply Chain Compromise - Real-time Open Source Software Supply Chain Security
A technical writeup of the malicious `@bitwarden/cli@2026.4.0` release linked to the Checkmarx campaign. Covers the poisoned publish path, loader changes,...
supply chain compromisereal time opensource software securitybitwarden cli
https://stadt-bremerhaven.de/bitwarden-nutzer-aufgepasst-das-problem-mit-der-cli-version-2026-4-0/
Bitwarden-Nutzer aufgepasst: Das Problem mit der CLI-Version 2026.4.0
Kurze Info für alle, die den Passwortmanager Bitwarden nutzen. Während die meisten von euch wahrscheinlich mit der Browser-Erweiterung oder ...
version 2026 4nutzer aufgepasstdas problemmit derbitwarden