• Platform
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - icon mend ai native appsec platform
    Mend AppSec Take a tour of the platform
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - ai
    Mend AI Secure AI powered applications
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - dast icon 1 DAST The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - apis icon 1 API security The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - eol icon EOL support
    Platform Benefits
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - repoi icon Repo integration Scalability-icon Scalability The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets -
    System prompt hardening Prevent prompt injection and misuse
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - ai security governance guide feature image
    AI Security Governance: A Practical Framework for Security and Development Teams
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - the complete guide to open source ai licensing 2026 1000x650
    The Complete Guide to Open Source & AI Licensing 2026
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - red teaming guide featured image
    AI Red Teaming Practical Guide
    The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo
Blog Tom Abai

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Tom Abai
Tom Abai

Tom Abai is a security researcher at Mend.io. He is passionate about finding and addressing security incidents in the software supply chain area. In his free time, he likes to play CTF's games and learn cool stuff regarding cybersecurity.
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - The Butlerian Jihad

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Tom Abai Apr 23, 2026
Malicious Packages

Mend.io tracks TeamPCP's latest supply chain attack.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog cover Team PCP part 4 1

A Poisoned Xinference Package Targets AI Inference Servers

Tom Abai Apr 22, 2026
Malicious Packages

Three poisoned xinference releases on PyPI target AI infrastructure credentials.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog cover Poisoned Axios

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026
Malicious Packages

See how the attack works, what to look for, and how to remediate.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog cover TEAM PCP part 3

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026
Malicious Packages

See how the attack works, what to look for, and how to remediate.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog cover TEAM PCP attack V2

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026
Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog cover CanisterWorm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026
Malicious Packages

Deep dive into the self-spreading CanisterWorm.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - blog post npm fake font packages

NPM User Flooding Registry with Fake Font Packages

Tom Abai Dec 16, 2025
Malicious Packages

Analysis of an npm account flooding the registry with malformed font packages.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog critical CVE 2025 55182

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications

Tom Abai Dec 4, 2025
Malicious Packages

Discover a critical security flaw that enables remote code execution in React Server Components.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog Zero day Shai hulud V2

Shai-Hulud: The Second Coming

Tom Abai Nov 24, 2025
Malicious Packages

See how the latest Shai-Hulud attack works.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Blog cover Mend Main Blues 1

NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack

Tom Abai Sep 16, 2025
Malicious Packages

A major NPM breach exposed 187 packages.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - npm supply chain attack blog

NPM Supply Chain Attack: Sophisticated Multi-Chain Cryptocurrency Drainer Infiltrates Popular Packages

Tom Abai Sep 8, 2025
Malicious Packages

A sophisticated npm supply chain attack compromised popular packages

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - truffelvscode blog post

Fake VS Code Extension on npm Spreads Multi-Stage Malware

Tom Abai Feb 6, 2025
Malicious Packages

Learn about a fake VS-code extension on npm—truffelvscode—typosquatting the popular truffle for VS-code extension.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - CVE Critical race condition in Apache Tomcat blog

CVE-2024-50379: A Critical Race Condition in Apache Tomcat

Tom Abai Dec 19, 2024
Malicious Packages

An Apache Tomcat web server vulnerability has been published, exposing the platform to remote code execution through a race condition failure.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - Solana Supply Chain Security Blog graphic

The @Solana/web3.js Incident: Another Wake-Up Call for Supply Chain Security

Tom Abai Dec 5, 2024
Malicious Packages

This post covers the attack flow, how it happened, and the importance of supply chain security.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - polyfill supply chain attack post

More than 100K sites impacted by Polyfill supply chain attack

Tom Abai Jul 1, 2024
Malicious Packages

The new Chinese owner tampers with the code of cdn.polyfill.io to inject malware targeting mobile devices.

Read More
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets - shrinking security debt with dependency management white paper

Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise 1

Dor Hayun, Tom Abai Mar 31, 2024
Malicious Packages

Discover how CVE-2024-3094 affects XZ Utils and enables SSH compromise. Get insights on detection, mitigation, and system security.

Read More
Previous
1 2
Next

Subscribe to our Newsletter

Join our subscriber list to get the latest news and updates

Thanks for signing up! 

© 2026 Mend.io (White Source Ltd.) All rights reserved.

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report