Eclipse Foundation to require pre-publish security checks for Open VSX extensions to reduce VS Code supply-chain risk.

Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer ...

Cybersecurity researchers from Socket’s Threat Research team have identified a developer-compromise supply chain attack targeting macOS users, where ...

GlassWorm malware is expanding to open source platforms, targeting macOS users with infostealers.

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

A new GlassWorm malware attack through compromised OpenVSX extensions focuses on stealing passwords, crypto-wallet data, and developer credentials and configurations from macOS systems.

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.