Bitwarden's CLI npm package was compromised in a Checkmarx-linked supply chain attack. Malicious code was found in an npm package version, but no user data seems to have been accessed. Other Bitwarden products remain unaffected.