Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign ---- - 52 minutes ago | 15 points | 0 comments - URL: https://socket.dev/blog/bitwarden-cli-compromised - Discussions: https://news.ycombinator.com/item?id=47876043 - Summary: Bitwarden CLI version 2026.4.0 has been compromised as part of the ongoing Checkmarx supply chain campaign. Socket researchers discovered that attackers exploited a compromised GitHub Action in Bitwarden's CI/CD pipeline to inject malicious code into the bw1.js file of the npm package @bitwarden/cli. This attack follows the same pattern identified in the broader Checkmarx supply chain compromise targeting multiple repositories. Users are advised to review CI logs and rotate any secrets potentially exposed to the compromised workflow. Socket's research team continues investigating and will publish detailed technical findings, indicators of compromise, and remediation guidance. This incident represents a significant supply chain security breach affecting password management tools.