Bitwarden CLI suffered a supply chain attack, with a malicious package circulating for about 1.5 hours

By: rootdata|2026/04/24 02:51:51

SlowMist CISO 23pds disclosed that the password management tool Bitwarden CLI version 2026.4.0 suffered a Checkmarx supply chain attack between 17:57 and 19:30 Eastern Time. The attacker briefly distributed a malicious package via npm by abusing the GitHub Action in the Bitwarden CI/CD pipeline.

The official confirmation states that Vault data was not leaked, and production systems were not affected; only users who installed this version via npm during that time window were impacted. The official recommendation for affected users is to immediately uninstall 2026.4.0, clean the npm cache, rotate sensitive credentials such as API Tokens and SSH Keys, investigate any abnormal activities on GitHub and CI, and upgrade to the fixed version 2026.4.1.

-- Price

The Ethereum Foundation has released this non-technical introductory report aimed at government officials, central banks, regulators, and corporate decision-makers, explaining how Ethereum works, how it is governed, how it differs from other blockchains, and how institutions and governments are alre...

Portugal 2-1 Croatia: Ronaldo's 20-Year Knockout-Stage Drought Ends With a Debt Finally Collected

Portugal beat Croatia 2-1 in the 2026 global football championship's knockout rounds as Ronaldo scored his first-ever knockout-stage goal, Gonçalo Ramos struck a stoppage-time winner, and VAR ruled out a late equalizer for offside.

Bitcoin Price Prediction July 2026: Will BTC Recover to $70K or Drop Below $55K?

Bitcoin price prediction for July 2026: Can BTC recover to $70,000 or fall below $55,000? Explore ETF flows, key support levels, Fed outlook, and our Bitcoin forecast.

A South Korean company that learned the strategy of hoarding coins, from a bull market to delisting?

When the overall momentum of the Korean stock market is strong, this batch of cryptocurrency concept stocks, branded as the "Korean version of Strategy," finds itself at a crossroads of life and death.

Where is Zhao Changpeng's billion-dollar investment going? YZi Labs' investment landscape fully revealed

Zhao Changpeng's billion-dollar new "family office" YZi Labs investment landscape revealed: 70% of the funds are committed to the crypto ecosystem, while 30% are cross-industry bets on AI and biotechnology, launching a new capital experiment in the post-Binance era.

Wosh: Inflation has cooled in recent weeks, AI is reshaping the economy, and forward guidance has lost its necessity

Federal Reserve Chairman Waller clearly stated at the ECB forum that the Fed will abandon forward guidance on interest rates, with future decisions relying entirely on real-time economic data. He noted that inflation risks in the U.S. have decreased over the past four weeks, but the ultimate impact ...

The most secretive AI winner

A century-old company that sells toilets and produces MSG has seen its stock price soar by "positioning" core materials for AI chips. This article clarifies the explosive opportunities for domestic substitution of semiconductor materials in the A-share market.

Looking at Stripe's ambitions and the future of stablecoins from OUSD

Stripe enters the stablecoin network battle with OUSD, a comprehensive look at the third paradigm evolution of digital dollars and the new infrastructure for global payments in the AI era.

From Pump.fun to Collector Crypt: Has Solana's income throne changed hands?

The revenue from consumer applications on Solana is no longer solely reliant on meme coin issuance, but is gradually spreading to more consumption scenarios.

Dan Bin's latest speech: Don't miss out on a great era

Don't let hesitation trap your steps, and don't let shortsightedness waste the passing years—make sure not to miss this magnificent era that belongs to us.

Robinhood launches its own blockchain, no longer wanting to be a tenant on others' chains

While laying off employees and issuing bonds, it is the predictive market business that temporarily supports the income.

Why Tokenized Stocks Are Booming in 2026 While Crypto Is Still Struggling

Why are tokenized stocks booming while the crypto market struggles? Explore the latest 2026 data, institutional adoption, and what it means for traders.

Former ByteDance employee's account: How I started with two Pinduoduo hard drives and made six times the profit with Seagate to achieve financial freedom?

A programmer from a big tech company bought hard drives on Pinduoduo and, following clues, managed to accurately capture the sixfold rising stock Seagate using the "finding daily anomalies + 13F institutional verification" framework, making a wild profit of $400,000 and achieving financial freedom.

A pre-announced harvesting case: After the cryptocurrency price dropped by 99%, the public chain Saga exited to transform into AI

True failure often isn't a single price drop, but rather a pricing mechanism that repeatedly rewards those who tell stories while repeatedly punishing those who believe in the stories.