Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
socket.dev
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.