PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm

aikido.dev | blog | #cloud | #supply-chain | #credential-theft | #npm | #ci-cd | #supply-chain-security | #worm | #shai-hulud | #bitwarden
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A malicious @bitwarden/cli release carried a self-propagating worm self-named 'Shai-Hulud: The Third Coming', harvesting SSH keys, cloud secrets, and MCP configs via Bitwarden's compromised CI pipeline.
Published
Collected

Related coverage

blog · aikido.dev
tensorlake NPM package compromised with Shai Hulud worm
# tensorlake NPM package compromised with Shai Hulud worm Written by Oliver Smith Published on: Oct 8, 2026 On 8 October 2026 a threat actor published a compromised version of tensorlake to npm....
blog · aikido.dev
Shai-Hulud Rises From the Dead after 111 days
The Shai-Hulud npm worm payload behind May's @AntV attack resurfaced after 111 days: four new packages on September 7 carried the identical hash, despite npm's new publish-time malware scanning.
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
blog · wiz.io
Shai-Hulud: Ongoing Package Supply Chain Worm Delivering Data-Stealing Malware
Wiz details the Shai-Hulud npm worm — malicious releases harvested secrets with TruffleHog, dumped them to public GitHub repos and self-propagated via stolen npm tokens across 100+ packages.
incident · wiz.io
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Wiz: keyv/cacheable packages were hijacked via a maintainer account; a Mini Shai-Hulud descendant hit 400+ packages, stealing credentials, AI configs and wallets; C2 via an Ethereum contract.
blog · aikido.dev
Good riddance, TeamPCP. Now for the hard part.
This incident analysis explains systemic gaps in package registry security exposed by recent malicious campaigns.
Back