GlassWorm Malware Returns to Open VSX, Emerges on GitHub

Back Feeds.Feedburner

GlassWorm Malware Returns to Open VSX, Emerges on GitHub

Feeds.Feedburner •Ionut Arghire • November 10, 2025

Share: View original

Three more VS Code extensions were infected last week and the malware has emerged in GitHub repositories as well.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GlassWorm Malware Resurfaces in Open VSX and GitHub GlassWorm malware has reappeared on the Open VSX registry and in GitHub repositories, infecting three additional VS Code extensions. This resurgence follows its removal from the official marketplace, as reported by Koi Security researchers. 6 sources 25

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

Platforms (1)