Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign.

https://socket.dev/blog/bitwarden-cli-compromised

#Bitwarden #BitwardenCLI #Checkmarx #cybersecurity #npm

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Socket