The Bitwarden security team confirms that a malicious version of the command-line client was briefly distributed.