Glassworm Malware Targets Developers Through npm, PyPI, OpenVSX, and GitHub
Thu May 28 2026
Development
Malware
Open Source
rhisac.org
Executive Summary A Cyber Security News report published on 27 May 2026 detailed an ongoing Glassworm malware campaign targeting software developers through trusted development platforms, including npm, PyPI, OpenVSX, and GitHub. The campaign first surfaced in October 2025 through malicious Visual Studio Code and OpenVSX extensions and has since expanded into Python repositories, React Native npm packages,...