Glassworm Malware Targets OpenVSX and Microsoft Visual Studio with 24 New Malicious Packages

Gbhackers •Mayura Kathir • December 2, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GlassWorm Malware Resurfaces in Open VSX Extensions Following Token Leak The Open VSX registry faced a supply chain attack after access tokens were leaked, allowing threat actors to publish malicious extensions. The GlassWorm malware campaign has returned with new extensions targeting developers' credentials and cryptocurrency wallets, leveraging obfuscation techniques to evade detection. Over 10,000 downloads of the new malicious extensions have been reported. 15 sources 30

Extracted Entities

Glassworm Malware Targets OpenVSX and Microsoft Visual Studio with 24 New Malicious Packages

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

Tools (1)