Sunday, April 26, 2026 · 2 of 5
Bitwarden CLI supply chain attack hits AI coding stacks
@bitwarden/cli@2026.4.0 was malicious for ~93 minutes; payload explicitly hunts Claude Code, Cursor, Codex CLI, Kiro, and Aider credentials. Treat as confirmed exposure if you installed it.