Data Breaches

Bitwarden CLI npm Package Compromised to Extract Credentials

via BleepingComputer
Bitwarden CLI npm Package Compromised to Extract Credentials

The Bitwarden command-line interface (CLI) experienced a security breach when attackers introduced a compromised package on the npm platform. This malicious package, identified as @bitwarden/cli, was designed to steal developer credentials and had the potential to infect other software projects as well. The incident highlights the risks associated with third-party software and the need for developers to stay vigilant about the integrity of their development tools. Users are encouraged to verify the authenticity of packages before installation and maintain updated security practices to protect their credentials and data. Source: CyberSathi.in.

Read the full story

Original reporting by BleepingComputer. We only summarise โ€” never republish.

Open source