Developer-Targeting Glassworm Malware Abuses npm, PyPI, OpenVSX, and GitHub