GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX
Tue Mar 17 2026
Malware
Open Source
www.bleepingcomputer.com
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. [...]