Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

Bitwarden CLI was compromised in the Checkmarx supply chain attack, marking one of the most damaging security incidents this year. The breach drew 165 upvotes and 68 comments as teams scrambled to assess exposure. Bitwarden's tool was infected via a tainted dependency, echoing patterns seen in larger campaigns. Security experts urge immediate rotation of vault credentials, as the CLI handles sensitive master passwords. The attack exploited Checkmarx's infrastructure, compromising 40+ clients before detection.