Re:Bitwarden CLI Compromised in Ongoing Checkmarx Supply Cha...
by pprotas on Thursday April 23, 2026 @03:06PM
(#47880143)
`bw list` shows plaintext credentials in the CLI https://bitwarden.com/help/cli/#list
I know this because I had the same surprised reaction
They probably caused it themselves, somehow, and then blamed bitwarden. Note in the original comment they aren't even entirely sure what the command was, and they weren't familiar with it or they wouldn't have been surprised by its output... so how can they be sure what else they did between that command and the weechat thing?
If the terminal or tmux fed terminal history into weechat, that's also not bw's problem.