TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

Researchers disclosed that on April 20–22, 2026 the TeamPCP group compromised the @bitwarden/cli tool and deployed a worm called Shai-Hulud (CanisterSprawl). The attackers used a trojanized checkmarx/kics Docker image which Dependabot automatically pulled in CI to execute payloads with access to repository secrets, exfiltrated encrypted credential blobs via victims’ GitHub repositories, used GitHub commits as a fallback C2, and injected persistence into ~/.bashrc and ~/.zshrc to target developer workflows and AI coding assistants.