PASSWORD MANAGER 'BITWARDEN' CLI WAS COMPROMISED IN A SUPPLY CHAIN ATTACK ⚠️

BITWARDEN CLI 2026.4.0 WAS COMPROMISED AS PART OF THE ONGOING CHECKMARX SUPPLY CHAIN CAMPAIGN AFTER ATTACKERS ABUSED A GITHUB ACTION IN BITWARDEN’S CI/CD PIPELINE: SOCKET - INFINITYHEDGE

SOCKET: IF YOU USE BITWARDEN CLI, WE RECOMMEND REVIEWING YOUR CI LOGS AND ROTATING ANY SECRETS THAT MAY HAVE BEEN EXPOSED TO THE COMPROMISED WORKFLOW

SECURITY RESEARCHER ADNAN: I BELIEVE THIS IS THE FIRST TIME A PACKAGE USING NPM TRUSTED PUBLISHING HAS BEEN COMPROMISED