Bitwarden CLI, the command-line interface for the password manager Bitwarden, has been compromised as part of a newly discovered Checkmarx supply chain campaign. The affected package version is @bitwarden/cli@2026.4.0, with malicious code published in 'bw1.js,' according to findings from JFrog and Socket.