npm Registry

Malicious Bitwarden CLI Package Compromises npm Registry

A malicious version of the Bitwarden CLI was distributed via npm for 93 minutes on April 22. The attack, linked to a broader supply chain campaign, targeted infrastructure credentials rather than vault data, highlighting critical vulnerabilities in CI/CD release pipelines.