Bitwarden CLI Compromised in Supply Chain Campaign (socket.dev)

• Bitwarden CLI compromised via malicious package injection
• Attack campaign identified and analyzed by Checkmarx researchers
• Systemic risks identified in automated software dependency chains

"The Bitwarden CLI was targeted in a sophisticated supply chain attack identified by Checkmarx. Attackers successfully injected malicious code via compromised software dependencies, highlighting critical vulnerabilities in automated software development pipelines. This breach emphasizes the systemic risk posed by third-party package ecosystems and necessitates tighter validation protocols for digital infrastructure tools."