Bitwarden CLI 2026.4.0 compromised in Checkmarx supply chain attack

Linux nerds like me, be aware that Bitwarden's cli app was compromised: socket.dev/blog/bitward...

Bitwarden's CLI NPM package was hijacked and used to spread credential stealer malware. This is related to the previous Checkmarx compromise. We'll be updating this thread as always with new information. Come join the effort!

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain https://lobste.rs/s/x79usb #security

Supply chain attacks are getting to be a headache for enterprise situations. Much like the npm one, this leans on someone writing malicious code in a library/package used by other things. socket.dev/blog/bitward...

Bitwarden CLI supply chain attack puts cryptocurrency wallet keys at risk The attackers chose the interface version Commands from the password manager. The security team discovered the hack on April 23 and linked it to the TeamPCP Altored chain campaign. ركّز البرمجية الخبيثة على تعليقة الديكورية…

#Bitwarden CLI was compromised in a supply chain attack! @bitwarden/[email protected] included malicious code: #SoftwareSupplyChainSecurity 👇 thehackernews.com/2026/04/bitw...

Bitwarden CLI compromised due to the Checkmarx incident. Ruh roh!