The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not ...

The compromise of a version of Bitwarden's CLI is connected to the ongoing Checkmarx supply chain campaign, but differences in the operational methods of both incidents are making it difficult to ...

Vercel has confirmed a security breach linked to a compromised third-party AI tool, exposing some environment variables and ...

Vercel confirmed a security incident involving unauthorized access to internal systems, stemming from a compromised ...

Hackers injected credential-stealing malware into the Bitwarden CLI tool via a supply chain attack on the NPM package, ...

Bitwarden’s command-line interface package was briefly poisoned through npm after attackers abused a GitHub Actions workflow in its software release pipeline, turning a trusted password-management ...

Etherpad is a self-hostable web editor written in Node.js for real-time collaborative writing – functionally comparable to ...