The Bitwarden CLI Hack Should Terrify Every Dev Using AI Agents
The Checkmarx supply chain campaign that hit Bitwarden’s CLI this week is the kind of story that makes me stop and stare at my own setup for a few uncomfortable minutes. If you haven’t read it yet: malicious packages impersonating @bitwarden/sdk-secrets were published to npm, and developers pulling those packages into their pipelines got compromised….