Bitwarden security incident history
Hacking, data breaches and other security incidents involving Bitwarden, with related coverage.
Incidents: 1 · Most recent
Bitwarden CLI npm distribution compromised, malicious version released
↳ Knock-on damage from the Checkmarx incident · View original incidentImpact: Malicious version 2026.4.0 briefly distributed
The npm distribution channel for the Bitwarden CLI was compromised, and a malicious version, 2026.4.0, was briefly distributed. The version included functionality to steal developer credentials and infect additional packages. Bitwarden confirmed the incident was linked to a compromise of Checkmarx-related developer tools and said there was no evidence that password vault data had been compromised.
Read on BleepingComputer ↗