The Bitwarden security team confirms that a malicious version of the command-line client was briefly distributed.
The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.
The compromise of a version of Bitwarden's CLI is connected to the ongoing Checkmarx supply chain campaign, but differences in the operational methods of both incidents are making it difficult to ...
Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...
A malicious version of the Bitwarden command-line interface (CLI) password manager was briefly distributed via the Node ...
Bitwarden confirmed its CLI npm package was compromised for 93 minutes on April 22, 2026, in a sophisticated supply chain attack linked to the recent Checkmarx breach. Attackers published a malicious ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results