If I run the compromised CLI, do they get all my passwords?
Exactly, that could widen the blast radius of this particular compromise significantly.
Read the article
The article explains what is extracted.
No, at least according to Bitwarden themselves: https://community.bitwarden.com/t/bitwarden-statement-on-che...
Exactly, that could widen the blast radius of this particular compromise significantly.