#openvsx.

GlassWorm malware attacks return via 73 OpenVSX “sleeper” extensions

Apr 28, 2026 // 00:56

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 “sleeper” extensions that turn malicious after an update. Six of the […]

Malicious GlassWorm software has infected over 400 code repositories across GitHub, npm, VSCode, and OpenVSX.

Mar 18, 2026 // 09:51

The GlassWorm supply-chain attack is back with a large, synchronized assault affecting many packages, repositories, and add-ons on GitHub, npm, and VSCode/OpenVSX. Researchers from Aikido, […]