Executive Summary
A high-impact supply chain attack was identified involving the hijacking of the popular `@bitwarden/cli` npm package (version 2026.4.0). The attackers, identified as TeamPCP, modified the package to execute a malicious loader that downloads the Bun runtime to execute an obfuscated JavaScript payload. This campaign, which shares Dune-themed naming conventions with the Shai-Hulud campaign, specifically targets developer workstations and CI/CD environments.
The malware performs extensive data harvesting, including GitHub and npm tokens, SSH keys, AWS/GCP/Azure credentials, and configuration files for AI tools like Claude and Kiro. It employs sophisticated exfiltration techniques, including a primary HTTPS channel and a fallback mechanism that uses GitHub commits to stage Personal Access Tokens (PATs) and discover secondary C2 domains. Furthermore, the malware can actively weaponize stolen GitHub tokens to hijack GitHub Actions and exfiltrate secrets from automated pipelines.