Bitwarden CLI Backdoor Exposes Crypto Supply Chain Risks

A malicious version of Bitwarden's command-line interface was published on npm under the official package name @bitwarden/[email protected] for 93 minutes on April 22. During this window, users who installed the CLI received a backdoored substitute that could hijack GitHub accounts. Bitwarden detected the compromise, removed the package, and stated there is no evidence of broader attacker access. The incident highlights the vulnerability of software supply chains in the crypto ecosystem, where trusted tools can be weaponized. While no direct crypto theft was reported, the attack vector—compromising developer credentials—poses a significant threat to crypto projects relying on open-source dependencies. This event underscores the need for rigorous package verification and multi-factor authentication across the industry.

Read full article on CryptoSlate