Bitwarden CLI version 2026.4.0, specifically the build obtained from npm between 2026-04-22T21:57Z and 2026-04-22T23:30Z, contained embedded malicious code due to a supply chain compromise related to a Checkmarx incident. This vulnerability allows for remote exploitation without user interaction, leading to complete confidentiality, integrity, and availability compromise.