/incidentsfield log

// platform

Bitwarden incidents

Indexed Non-Human Identity credential leak incidents that affected Bitwarden. Sorted by disclosure date.

1 incident indexed

2026-04-22·CRITICAL9.0·confirmed
Bitwarden CLI Supply Chain Compromise (2026)
A malicious build of @bitwarden/cli was published to the public npm registry for roughly 90 minutes, exfiltrating cloud tokens, SSH keys, and AI tooling credentials from CI runners and developer machines.
vector / npm supply chainplatforms / npm, GitHub, Bitwarden, +3read / 6 min