@bitwarden/cli – GitGuardian Views on helloworm00
ID: 076d49c9-7591-5566-a2d6-53da03265fc5
STIX ID: report--076d49c9-7591-5566-a2d6-53da03265fc5
Feed Name: Security Boulevard
Threat Score
A supply-chain compromise hijacked the Bitwarden CLI package and a Checkmarx KICS Docker image to exfiltrate credentials; primary exfiltration goes to audit.checkmarx.cx with GitHub-based fallbacks using signed commit markers and attacker-controlled repos, and Dependabot-run CI with repo secrets was leveraged for propagation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.