The article describes a supply chain compromise involving malicious Checkmarx KICS Docker images and code extensions, though it does not specify an attack vector or method for the Bitwarden CLI component mentioned in the title. No CVSS score, affected version ranges, fixed versions, or workarounds are provided in the given content.
Research / Security News Malicious Checkmarx Artifacts Found in Official KICS Docker Repository and Code Extensions Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise. By Socket Research Team - Apr 22, 2026