Bleepingcomputer Open VSX Registry Faces Security Incident with Leaked Tokens and Malicious Extensions
Article Content
Browse articles 
The Open VSX registry experienced a security incident where access tokens were leaked by developers in public repositories. This exposure allowed threat actors to publish malicious extensions, affecting projects with significant user bases, including those with 150,000 downloads. The leak was identified by Wiz researchers, prompting the registry to rotate the compromised tokens.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
More articles in this cluster (4)
Following this threat?
Track Glassworm and Open VSX in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Surge in Supply Chain Attacks: Axios Compromised In 2026, supply chain attacks surged, with notable incidents involving the axios package. Aikido Intel reported 19,500 malicious packages identified from 7.5 million analyzed, with attackers exploiting open source dependencies. In March 2026, attackers compromised the npm account of an axios maintainer, publishing two… 
GlassWorm Malware: First Self-Propagating Worm for VS Code Extensions In October 2025, Koi Security discovered GlassWorm, a self-propagating worm targeting Visual Studio Code extensions on OpenVSX and Microsoft marketplaces. The malware has compromised at least 35,800 installations, utilizing invisible code injection techniques to evade detection. GlassWorm operates by stealing NPM…