StepSecurity Logo
StepSecurity
  • Get Started

  • Overview

  • Workflow Runs

    Baseline

    Detections

    Suppression Rules

    Policy Store

    Self Hosted Runners

  • Apps & PATs

  • Action Secrets

  • Settings

  1. compromised-packages
  2. Install @bitwarden/cli Compromised Package

Jobs

  • install-bitwarden-cli

install-bitwarden-cli

Harden-runner policy:
audit
Start time:23 Apr 2026 13:43:21 GMTRunner name:-Duration:51sJob labels:ubuntu-latest
Show:
Show all steps
StepPIDProcessDestinationPortStatus
Install @bitwarden/cli 2026.4.0
2367envnpm Registryregistry.npmjs.orgAPI Calls418443Allowed23 Apr 2026 13:43:30
Install @bitwarden/cli 2026.4.0
2380nodeGitHubgithub.comAPI Calls1443Allowed23 Apr 2026 13:43:39
Install @bitwarden/cli 2026.4.0
2380nodeGitHubrelease-assets.githubusercontent.comAPI Calls1443Allowed23 Apr 2026 13:43:39
Install @bitwarden/cli 2026.4.0
2443python3.13azcliprod.blob.core.windows.net443Allowed23 Apr 2026 13:43:49
Install @bitwarden/cli 2026.4.0
2467python3.13dc.services.visualstudio.com443Allowed23 Apr 2026 13:43:51
Install @bitwarden/cli 2026.4.0
2396bunGitHubapi.github.com443Allowed23 Apr 2026 13:43:43
Install @bitwarden/cli 2026.4.0
2482pwshAzuremanagement.azure.comAPI Calls1443Allowed23 Apr 2026 13:43:55
Install @bitwarden/cli 2026.4.0
2482pwshdc.services.visualstudio.comAPI Calls1443Allowed23 Apr 2026 13:43:56
Install @bitwarden/cli 2026.4.0
2482pwshwww.powershellgallery.comAPI Calls8443Allowed23 Apr 2026 13:43:59
Install @bitwarden/cli 2026.4.0
2396/home/runner/work/compromised-packages/compromised-packages/node_modules/@bitwarden/cli/bunaudit.checkmarx.cx443Attack Blocked23 Apr 2026 13:43:43