Mastodawn

Bitwarden CLI recently fell victim to a sophisticated supply chain attack, where attackers compromised a GitHub Action to bypass npm's trusted publishing. The incident involved self-propagating malware, sharing infrastructure with the Checkmarx campaign, that harvested developer credentials and spread through CI/CD pipelines. This marks a significant shift, showing how even robust safeguards…