Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm

Malware found in @bitwarden/cli v2026.4.0 steals SSH keys, cloud secrets, and AI coding tool credentials, then spreads through victims’ own npm packages. Inside: a worm calling itself “Shai-Hulud: The Third Coming.” Category: Vulnerabilities & Threats