All Detections

Bitwarden Cli Npm Hijack

avatar
Ibrahim Saud@tektrix
updated Jun 21, 2026102

Identifies developers or CI pipelines executing the hijacked @bitwarden/cli npm package (v2026.4.0) during the exposure window.

YARA-L