GlassWorm Supply Chain Attack Just Hijacked 72 VS Code Extensions β And Your IDE Might Be Next
Socket researchers discovered 72 new malicious Open VSX extensions in the GlassWorm campaign, now using transitive dependencies to deliver payloads through trusted extensions.