Bitwarden Confirms CLI NPM Package Compromise in Supply-Chain Attack
Summary
Bitwarden confirmed its CLI NPM package version 2026.4.0 was compromised with malware designed to steal cloud, developer, SSH and AI-tooling secrets. It said there was no evidence end-user vault data or production systems were affected.
Key points
- Bitwarden confirmed that CLI NPM package version 2026.4.0 was compromised.
- The package’s altered execution path runs a loader that downloads a Bun archive from GitHub and executes a JavaScript payload.
- The payload targets secrets and tokens from Azure, AWS, GitHub, GCP and NPM, as well as SSH material, shell history and AI-tooling and MCP-related files.
- The malware uses harvested GitHub tokens to create repositories, branches and workflow files, then retrieves artifacts to seek additional secrets; it attempts exfiltration over HTTPS and falls back to GitHub paths.
- Bitwarden said its investigation found no evidence that end-user vault data was accessed or at risk, or that production data or systems were compromised.
- Socket identified shared tooling with the Checkmarx attack. TeamPCP claimed the Checkmarx incident; researchers cite a Shai-Hulud string in the Bitwarden payload but do not definitively link TeamPCP to the prior attacks.
Article Details
- Victim Organization
- Bitwarden
- Incident Type
- Supply-chain attack compromising the Bitwarden CLI NPM package with malicious code designed to steal credentials and secrets.
- Data Types Exposed
- Credentials and secrets/tokens targeted for theft; successful exfiltration from the Bitwarden incident is not confirmed
- SSH material, shell history, AI tooling configuration, and MCP-related files targeted for collection
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Version 2026.4.0 of the Bitwarden CLI NPM package contained malicious code. Bitwarden reported no evidence that end-user vault data was accessed or at risk, or that production data or systems were compromised.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | checkmarx[.]cx | Malware exfiltration destination identified in the related Checkmarx attack; the article describes a similar exfiltration pattern in the Bitwarden attack. |
MITRE ATT&CK
T1195.002 · Compromise Software Supply ChainThe Bitwarden CLI NPM package was compromised in a software supply-chain attack.T1552.001 · Credentials In FilesThe malware was designed to collect credentials and secrets from files and configuration sources, including SSH material and shell history.T1567.001 · Exfiltration to Code RepositoryThe malware attempted to exfiltrate collected data over HTTPS and could use GitHub paths if that failed.
People
Threat Actors
Malware
Vendors
Products
Bitwarden CLIOn Thursday, multiple security firms warned that version 2026.4.0 of the Bitwarden CLI’s NPM package contained malicious code to fetch a JavaScript payload designed to steal credentials and secrets from victim machines.GitHub ActionsAdditionally, the payload weaponizes the identified GitHub tokens and abuses GitHub Actions to create repositories in the victims’ accounts, create branches, commit workflow files, and download the resulting artifacts