Robuta

Sponsor of the Day: Jerkmate

https://www.mend.io/blog/compromised-bitwarden-cli-npm-worm-ai-poisoning/ Compromised Bitwarden CLI Poisons AI Assistants and Spreads as npm Worm Apr 23, 2026 - A fake @bitwarden/cli package published to npm combines credential harvesting, a self-spreading npm worm, and a first-of-its-kind AI assistant poisoning... compromised bitwarden cli ai assistants npm worm poisons spreads https://www.aikido.dev/blog/shai-hulud-npm-bitwarden-cli-compromise Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm Apr 23, 2026 - Malware found in @bitwarden/cli v2026.4.0 steals SSH keys, cloud secrets, and AI coding tool credentials, then spreads through victims' own npm packages.... compromised bitwarden cli shai hulud self propagating npm worm back https://www.itsecuritynews.info/the-butlerian-jihad-compromised-bitwarden-cli-deploys-npm-worm-poisons-ai-assistants-and-dumps-github-secrets/ The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps... Mend.io tracks TeamPCP’s latest supply chain attack. The post The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps... compromised bitwarden cli npm worm ai assistants butlerian jihad https://www.ox.security/blog/shai-hulud-bitwarden-cli-supply-chain-attack/ Bitwarden CLI Compromised: Inside the Shai-Hulud Supply Chain Attack supply chain attack bitwarden cli shai hulud compromised inside https://piefed.0x0c.link/c/selfhosted@lemmy.world/p/1497/bitwarden-cli-distributed-through-npm-has-been-compromised-bitwarden-statement-on-ch Bitwarden CLI distributed through NPM has been compromised. Bitwarden Statement on Checkmarx Supply... bitwarden cli checkmarx supply distributed npm compromised https://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious npm code checkmarx supply chain bitwarden cli compromised ongoing campaign