Everyone's missing the CIA link here. BASH =. Bourne Again SHell, named after Jason Bourne of the Treadstone Project. It's a CIA backdoor.
Networking vendors are all busily checking their stuff to make sure only the right backdoors are in their code.
What idiot government set the precedent that nation states can attack companies? Wait, no, don't answer that.