Malware & Threats Dozens of Open VSX Extension Clones Linked to GlassWorm Malware Over 70 cloned Open VSX extensions are likely sleeper extensions designed to distribute malware. Ionut ArghireApril 28, 2026
Application Security GlassWorm Malware Returns to Open VSX, Emerges on GitHub Three more VS Code extensions were infected last week and the malware has emerged in GitHub repositories as well. Ionut ArghireNovember 10, 2025
Malware & Threats Open VSX Downplays Impact From GlassWorm Campaign Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense. Ionut ArghireOctober 31, 2025
Vulnerabilities Vulnerability Exposed All Open VSX Repositories to Takeover A vulnerability in the extension publishing mechanism of Open VSX could have allowed attackers to tamper with any repository. Ionut ArghireJune 27, 2025