Mike L

CISO @ Palantir. Opinions are my own. Posts auto-delete after 90 days.

[Mike L @mlosap]

🚨🚨🚨 This is going to be bad 🚨🚨🚨

[Feross @feross]

Heads up! Bitwarden CLI v2026.4.0 was compromised in the ongoing Checkmarx supply chain campaign.

Attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline to ship malicious code.

We'll update this post as more details are confirmed.
https://t.co/a9CjXKo5t4