Bitwarden Statement on Checkmarx Supply Chain Incident

ahboyashreads (@ahboyashreads), Apr 23, 2026, 16:54 UTC

Bitwarden Statement on Checkmarx Supply Chain Incident The investigation found no evidence that end user vault data was accessed or at risk, or that production data or production systems were compromised. Once the issue was detected, compromised access was revoked, the malicious npm release was deprecated, and remediation steps were initiated immediately. https://community.bitwarden.com/t/bitwarden-statement-on-checkmarx-supply-chain-incident/96127/5

The excerpt is quoted from a public Telegram channel, which owns its text.

Read the original post on Telegram

More posts from ahboyashreads · All channels

FixLane Live vulnerabilities with ready fix prompts