The Bitwarden CLI version 2026.4.0 was compromised through a supply chain attack, introducing malicious code into its distribution.

🚨 Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline. We’ll continue updating our coverage as more details are confirmed. https://socket.dev/blog/bitwarden-cli-compromised

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline. https://socket.dev/blog/bitwarden-cli-compromised #BitWarden #cybersecurity #passwordmanager #password

#Bitwarden CLI was compromised in a supply chain attack! @bitwarden/[email protected] included malicious code: #SoftwareSupplyChainSecurity 👇 https://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ... - https://socket.dev/blog/bitwarden-cli-compromised Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline. #TWiT

비트워든 CLI에도 공급망 공격이... > Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline. https://socket.dev/blog/bitwarden-cli-compromised

"Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline." https://socket.dev/blog/bitwarden-cli-compromised