Supply Chain Sabotage: Bitwarden CLI Compromised in Global “Checkmarx” Campaign

**Supply-chain compromise of Bitwarden CLI:** Researchers report a malicious npm package release (v2026.4.0) containing bw1.js that was likely injected via a compromised GitHub Action; the payload scrapes memory and environment variables to steal tokens, cloud credentials, SSH keys and exfiltrates data to public repositories, requiring immediate package removal, credential rotation, and persistence hunting.