Bitwarden CLI NPM Package Compromise Report (opensourcemalware.com)

• Detection of malicious code injection in public NPM repository.
• Exposure risk for automated infrastructure and developer workflows.
• Urgent requirement for improved software supply chain verification.

"The Bitwarden CLI NPM package was found to contain malicious code following a supply chain compromise. This incident poses significant risks to automated development environments and CI/CD pipelines that rely on third-party dependencies. Such vulnerabilities highlight the fragility of software ecosystems upon which European digital infrastructure and secure communications depend, necessitating enhanced audit protocols for open-source repositories."