Malware Campaign Targets Open VSX Extension with 5,066 Downloads

Malware Campaign Targets Open VSX Extension with 5,066 Downloads

First seen 30 Jan 2026, 19:15 UTC •RedhotcyberRedditCybersecuritynewsGbhackersCyberpress+12 •80% similarity •36.9

Article Content

Browse articles
ThreatCluster

A sophisticated malware campaign has compromised the Open VSX extension marketplace, affecting over 5,000 developer workstations. The malicious package masqueraded as a legitimate Angular Language Service extension, embedding encrypted malware that activates upon opening HTML or TypeScript files. The attack utilized typosquatting and steganography techniques to evade detection.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Glassworm Fresh GlassWorm Attack Glassworm Malware Campaign Open VSX Extension Marketplace Open VSX Publisher Open VSX OpenVSX Open VSX Registry MacOS VS Code Marketplace