Mend.io Blog

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets

Tom Abai Apr 23, 2026

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Filter & Search

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - the butlerian jihad

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Tom Abai Apr 23, 2026

Malicious Packages

Mend.io tracks TeamPCP's latest supply chain attack.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog cover team pcp part 4 1

A Poisoned Xinference Package Targets AI Inference Servers

Tom Abai Apr 22, 2026

Malicious Packages

Three poisoned xinference releases on PyPI target AI infrastructure credentials.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog zero day visibility 1000x650

From Panic to Playbook: Modernizing Zero‑Day Response in AppSec

Shannon Davis Apr 21, 2026

Application Security

Learn how AppSec teams build a repeatable zero-day response workflow.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog project glasswing 1000x650

Anthropic’s Project Glasswing: What It Means for AppSec

Shannon Davis Apr 9, 2026

Application Security

See what AI-powered offense means for your AppSec & AI Security program.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - docker hardened images integration

Container Security Without Context Is Just More Noise

Shannon Davis Apr 7, 2026

Container Security

Smarter container security with Docker Hardened Images.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog ai application security 1000x650

AI Application Security: 6 Focus Areas and Critical Best Practices

Tiffany Jennings Apr 2, 2026

AI Models Risk

Learn how AI application security differs from traditional AppSec.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog cover poisoned axios

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog cover team pcp part 3

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog cover team pcp attack v2

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026

Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog cover canisterworm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - cursor incident

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Tiffany Jennings Mar 20, 2026

AI Models Risk

Cursor’s Composer 2 identified as Moonshot’s Kimi K2.5 exposing an AI governance gap.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog mend partnership expansion 1000x650

Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India

Stephanie Broyles Mar 19, 2026

Application Security

Local cloud infrastructure in India for data residency requirements.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog ai driven project classification

Introducing AI-powered Contextual Project Classification: From severity scores to business risk

Tiffany Jennings Mar 17, 2026

AI Models Risk

Find your most sensitive code and prioritize fixes.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - system prompt weakness detection blog post

Introducing System Prompt Hardening: production-ready protection for system prompts

Tiffany Jennings Mar 10, 2026

AI Models Risk

Secure your AI applications with system prompt hardening.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog application security testing solutions 1000x650

Best Application Security Testing Solutions: Top 12 in 2026

Tiffany Jennings Mar 5, 2026

Application Security

Compare SAST, DAST, IAST, and SCA solutions.

The butlerian jihad: compromised bitwarden cli deploys npm worm, poisons ai assistants, and dumps github secrets - blog ai compliance

AI Compliance: 5 Key Frameworks, Challenges, and Best Practices

Tiffany Jennings Mar 3, 2026

AI Models Risk

Discover how to manage bias, privacy, and shadow AI risks.

1 2 3 4 ... 37

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report