Checkmarx-style supply chain attack hits password manager Bitwarden