Open VSX Marketplace is a community-driven, open-source marketplace for Visual Studio Code extensions, functioning as an alternative to the official VS Code Marketplace.
Open VSX Marketplace is a community-driven, open-source marketplace for Visual Studio Code extensions, functioning as an alternative to the official VS Code Marketplace. Its cybersecurity significance lies in the potential for malicious extensions to be uploaded or masquerade as legitimate add-ons, creating supply-chain and endpoint risks for developers and users; robust vetting, signing, and monitoring are essential for such extension ecosystems. The recent GlassWorm development underscores broader cross-platform threats to crypto-focused software on macOS and the importance of securing software distribution surfaces.
Checkmarx, a software security firm, is investigating a significant data leak after its GitHub repository was compromised in a supply-chain attack on March 23, 2026. The attack, attributed to the TeamPCP cybercrime…
A fourth wave of the GlassWorm campaign is targeting macOS developers by distributing malicious VSCode/OpenVSX extensions that contain trojanized versions of crypto wallet applications. These extensions are available in…