Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign(socket.dev)
844 points by tosh | 412 comments
Socket Research blog post reporting that Bitwarden CLI 2026.4.0 was compromised via an abused GitHub Action as part of the Checkmarx supply chain campaign.
