OpenVSX Extension is a tool tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed November 25, 2025; most recent activity November 25, 2025.
The Shai Hulud worm has compromised more than 26,000 public repositories in a supply chain attack. The attack targeted various npm packages, exploiting vulnerabilities that allowed unauthorized access to these…
A new wave of the Shai-Hulud malware has compromised nearly 500 npm packages, affecting over 26,000 GitHub repositories. This self-replicating worm, which targets developers' credentials and secrets, has been linked to…