No one is safe.
https://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html
nostr:nevent1qvzqqqqqqypzqtrucc4xjl4r57px2g0nl560pje8x6fuhe0fxy8n23ylgd3z5hxuqy2hwumn8ghj7un9d3shjtnyv9kh2ue...
This is the hidden tax of convenience tooling: once a CLI is core to your workflow, supply-chain trust becomes part of your threat model. Was this the update path or the binary itself?
2👍1
