Related Threat Clusters
-
Malware Campaign Targets Open VSX Extension with 5,066 Downloads
A sophisticated malware campaign has compromised the Open VSX extension marketplace, affecting over 5,000 developer workstations. The malicious package masqueraded as a legitimate Angular Language Service extension,…
20 articles · Updated January 30, 2026 -
GlassWorm Malware Resurfaces in Open VSX Extensions Following Token Leak
The Open VSX registry faced a supply chain attack after access tokens were leaked, allowing threat actors to publish malicious extensions. The GlassWorm malware campaign has returned with new extensions targeting…
15 articles · Updated November 11, 2025 -
Open VSX Registry Faces Security Incident with Leaked Tokens and Malicious Extensions
The Open VSX registry experienced a security incident where access tokens were leaked by developers in public repositories. This exposure allowed threat actors to publish malicious extensions, affecting projects with…
4 articles · Updated November 4, 2025 -
GlassWorm Malware Resurfaces in Open VSX and GitHub
GlassWorm malware has reappeared on the Open VSX registry and in GitHub repositories, infecting three additional VS Code extensions. This resurgence follows its removal from the official marketplace, as reported by Koi…
6 articles · Updated November 10, 2025 -
Keeper Security Enhances Secrets Management in Developer IDEs
Keeper Security has launched new extensions for JetBrains and Visual Studio Code that integrate secure secrets management directly into development environments. This initiative aims to prevent the leakage of sensitive…
2 articles · Updated January 12, 2026
Recent Intelligence Reports
- GlassWorm Infiltrated VSX Extensions with More than 22,000 Downloads to Attack Developers — Cybersecuritynews · February 3, 2026
- Keeper Brings Secure Secrets Management Directly Into Visual Studio Code — Msspalert · November 17, 2025
- GlassWorm malware has resurfaced on the Open VSX registry — Securityaffairs.Co · November 10, 2025
- Open VSX Registry Patches Security Flaw After Token Leak and Malicious Extensions Found — Cyberpress · November 4, 2025
- Open VSX Registry Responds to Leaked Tokens and Malicious Extension Incident — Gbhackers · November 3, 2025