Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

https://socket.dev/blog/bitwarden-cli-compromised

#bitwarden #infosec #privacy