Malware & Threats GlassWorm Botnet Disrupted Security firms took down all four command-and-control (C&C) channels used by the GlassWorm malware. Ionut ArghireMay 27, 2026
Malware & Threats Dozens of Open VSX Extension Clones Linked to GlassWorm Malware Over 70 cloned Open VSX extensions are likely sleeper extensions designed to distribute malware. Ionut ArghireApril 28, 2026
Malware & Threats ForceMemo: Python Repositories Compromised in GlassWorm Aftermath Hundreds of GitHub accounts were accessed using credentials stolen in the VS Code GlassWorm campaign. Ionut ArghireMarch 16, 2026
Malware & Threats Open VSX Publisher Account Hijacked in Fresh GlassWorm Attack A hacker published malicious versions of four established VS Code extensions to distribute a GlassWorm malware loader. Ionut ArghireFebruary 2, 2026
Application Security GlassWorm Malware Returns to Open VSX, Emerges on GitHub Three more VS Code extensions were infected last week and the malware has emerged in GitHub repositories as well. Ionut ArghireNovember 10, 2025
Malware & Threats Open VSX Downplays Impact From GlassWorm Campaign Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense. Ionut ArghireOctober 31, 2025
Malware & Threats Supply Chain Attack Targets VS Code Extensions With ‘GlassWorm’ Malware The malware uses invisible Unicode characters to hide its code and blockchain-based infrastructure to prevent takedowns. Ionut ArghireOctober 21, 2025