72 Malicious Open VSX Extensions Linked to GlassWorm Campaig...

The GlassWorm threat actor has escalated its campaign by abusing VS Code extension manifest relationships, enabling benign-looking Open VSX extensions to silently deliver malware through transitive dependencies and extension packs, making one-time reviews insufficient and putting developer workstations and credentials at heightened risk.