Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
Bitwarden CLI npm package got compromised today, looks like part of the ongoing Checkmarx supply chain attack If you’re using @bitwarden/cli version 2026.4.0, you might want to check your setup From what researchers found: \- malicious file added (bw1.js) \- steals creds from GitHub, npm, AWS, A