Fresh Wave of GlassWorm VS Code Extensions Slices Through Supply Chain
Source: Dark Reading · Category: Supply Chain
GlassWorm campaign continues seeding malicious VS Code extensions on Open VSX marketplace with self-propagating malware. If developers use VS Code and pull extensions from Open VSX, immediate review and endpoint scanning required. This poses direct risk to firm development and IT infrastructure.