Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign