Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
socket.dev
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
  • wheezy@lemmy.mlEnglish
    5·
    4 months ago

    Just the CLI version and for a few unlucky people that actually downloaded the malicious update via npm before removed.

    Sucks. But seems to have been caught quickly.