Supply Chain Compromise: Malicious NPM Package Targeting Bitwarden CLI & Bun v1.3.13

G'iyosiddin Muxammadiyev@giyosiddin

•updated Apr 27, 2026•22•0•626

Bitwarden CLI (@bitwarden/cli@2026.4.0) was compromised in April 2026 as part of the Checkmarx-linked supply chain attack. Attackers injected malicious code via Bitwarden’s CI/CD pipeline. Ref: https://cyberinsider.com/bitwarden-cli-backdoored-in-checkmarx-supply-chain-attack https://www.aikido.dev/blog/shai-hulud-npm-bitwarden-cli-compromise