Bleepingcomputer
New GlassWorm Malware Targets macOS Developers with Trojanized Crypto Wallets
First seen 1 Jan 2026, 18:23 UTC
•



+1
•40.8
Export
Article Content
Browse articles
A fourth wave of the GlassWorm campaign is targeting macOS developers by distributing malicious VSCode/OpenVSX extensions that contain trojanized versions of crypto wallet applications. These extensions are available in the OpenVSX registry and the Microsoft Visual Studio Marketplace, which are used to enhance the functionality of VS Code-compatible editors.
Ask AI about this cluster
Answers cite the sources they use
Analyzing cluster data...
Referenced clusters
Something went wrong. Please try again.
More articles in this cluster
Continue Reading
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
PEEP Chrome Extension Turns Browsers Into Remote Access Tools
Glassworm Malware Targets React Native npm Packages in Supply Chain Attack
GlassWorm Malware Campaign Targets OpenVSX with 73 Malicious Extensions
Malicious JetBrains Plugins Exfiltrate AI API Keys from Developers
Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and Google