Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain ...