Bitwarden CLI backdoored in Checkmarx supply chain attack
The Bitwarden CLI has been compromised as part of the ongoing Checkmarx supply chain campaign, with attackers injecting malicious code into an official release through a poisoned CI/CD workflow. According to a brief report from the Socket Research Team, the compromised package is @bitwarden/cli version 2026.4.0, which contains malicious code embedded in the file bw1.js. … The post Bitwarden CLI backdoored in Checkmarx supply chain attack appeared first on CyberInsider.
The Bitwarden CLI was compromised through a poisoned GitHub Actions workflow in the Checkmarx supply chain campaign, allowing attackers to inject malicious code into an official release.
Read the full article
This is a curated summary. The complete article is available at Cyber Insider.