GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

Back Thehackernews

GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

Thehackernews •[email protected] (The Hacker News) • November 10, 2025

Share: View original

Static defenses overwhelm teams with vuln lists. Learn how automation and context-driven reduction close real risks faster.

Learn how to protect cloud workloads, control access, and meet compliance requirements — without slowing innovation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GlassWorm Malware Resurfaces in Open VSX Extensions Following Token Leak The Open VSX registry faced a supply chain attack after access tokens were leaked, allowing threat actors to publish malicious extensions. The GlassWorm malware campaign has returned with new extensions targeting developers' credentials and cryptocurrency wallets, leveraging obfuscation techniques to evade detection. Over 10,000 downloads of the new malicious extensions have been reported. 15 sources 30

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)